@stacksjs/ts-cloud 0.13.1 → 0.15.0

package/dist/{chunk-j7vsrx9g.js → chunk-zhg1kvw3.js}

@@ -1,4 +1,4 @@
-import{he,se,T,oe,or}from"./chunk-a1p70h5d.js";import{a}from"./chunk-6gtqjsg9.js";import{y}from"./chunk-8s9m8pyb.js";import{h}from"./chunk-65ajja2a.js";import{f}from"./chunk-0g2jkhy5.js";function Sa(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:x=3008,computeOriginId:E="app-compute",retainOnStackDelete:M=!1}=t,S=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],v=N?["GET","HEAD"]:["GET","HEAD"],O={},B={};O.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},O.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",O[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+import{fe,se,T,oe,or}from"./chunk-kfwg1c6q.js";import{a}from"./chunk-t5e5phth.js";import{y}from"./chunk-sxtgx8fj.js";import{h}from"./chunk-t054j0zn.js";import{f}from"./chunk-trsaqsgv.js";function ba(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:x=3008,computeOriginId:E="app-compute",retainOnStackDelete:M=!1}=t,S=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],v=N?["GET","HEAD"]:["GET","HEAD"],O={},B={};O.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},O.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",O[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   var request = event.request;
   if (request.uri === '/' || request.uri === '') {
     return {
@@ -24,7 +24,7 @@ import{he,se,T,oe,or}from"./chunk-a1p70h5d.js";import{a}from"./chunk-6gtqjsg9.js
   }
 
   return request;
-}`}};let R={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},d=N?{Id:E,DomainName:w,CustomOriginConfig:{HTTPPort:x,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=N?E:`S3-${s}`,A={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:d?[d,R]:[R],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:j,CachedMethods:v,Compress:!0,...N?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...c&&I?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[I,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!c&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...N&&c?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:g?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&p)A.Aliases=e&&e.length>0?e:[u],A.ViewerCertificate={AcmCertificateArn:p,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else A.ViewerCertificate={CloudFrontDefaultCertificate:!0};return O.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...c&&N&&I?[I]:[],...!c?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:A}},B.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},B.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},O.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},B.SiteUrl={Description:"Site URL",Value:u?`https://${u}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s} (External DNS)`,Resources:O,Outputs:B}}async function nn(t){let s=t.region||"us-east-1",u="us-east-1",e=t.domain,p=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new f("us-east-1"),c=new oe("us-east-1"),g=null;if(!t.skipDnsVerification){g=T(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let o=await g.listRecords(e);if(!o.success){let n=o.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:p,message:`DNS provider '${g.name}' cannot manage domain ${e}: ${n}`}}console.log(`DNS provider '${g.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let C=t.certificateArn,E=e.split(".").length===2?`www.${e}`:void 0;if(!C){console.log(`Checking for existing SSL certificate for ${e}...`);let o=await c.findCertificateByDomain(e),n=!1;if(o&&o.Status==="ISSUED"){if(E&&o.SubjectAlternativeNames)n=o.SubjectAlternativeNames.includes(E)||o.SubjectAlternativeNames.some((m)=>m===`*.${e}`);else n=!0;if(n)C=o.CertificateArn,console.log(`Found existing certificate with www coverage: ${C}`);else console.log(`Existing certificate doesn't cover ${E}, requesting new one...`)}if(!C){if(!g)return{success:!1,stackName:i,bucket:p,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${E?` (including ${E})`:""}...`);let b=await new se(g,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:E?[E]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(b.status!=="issued")return{success:!1,stackName:i,bucket:p,message:`SSL certificate validation failed. Status: ${b.status}`};C=b.certificateArn,console.log(`Certificate issued: ${C}`)}}let M=!1,S;try{let o=await r.describeStacks({stackName:i});if(o.Stacks.length>0){let n=o.Stacks[0],m=n.StackStatus;if(m==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),M=!1;else if(m==="DELETE_COMPLETE")M=!1;else M=!0,S=(n.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(o){if(o.message?.includes("does not exist")||o.code==="ValidationError")M=!1;else throw o}let N=S||p;if(!M){let o=new a(s),n=new y,m=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let b=await n.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){m=!0,console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let P=(await n.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V)return console.log(`Using existing S3 bucket: ${V}`),{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!m)try{if((await o.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let l=o.emptyBucket(p).then(()=>o.deleteBucket(p)),D=new Promise((F,P)=>setTimeout(()=>P(Error("Bucket cleanup timeout")),30000));await Promise.race([l,D]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let D=Date.now().toString(36);N=`${p}-${D}`,console.log(`Using alternative bucket name: ${N}`)}}}catch{}}let v=Sa({bucketName:N,domain:e,aliases:E?[e,E]:[e],certificateArn:C,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),O=Object.entries(t.tags||{}).map(([o,n])=>({Key:o,Value:n}));if(O.push({Key:"ManagedBy",Value:"ts-cloud"}),O.push({Key:"Application",Value:t.siteName}),g)O.push({Key:"DnsProvider",Value:g.name});let B,I=!1;if(M){I=!0,console.log(`Updating CloudFormation stack: ${i}`);try{B=(await r.updateStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O})).StackId,console.log(`Update initiated, stack ID: ${B}`)}catch(o){if(o.message?.includes("No updates are to be performed")){let n=await r.describeStacks({stackName:i});B=n.Stacks[0].StackId;let m=n.Stacks[0]?.Outputs||[],b=(D)=>m.find((F)=>F.OutputKey===D)?.OutputValue,l=b("DistributionDomain");if(l)await H(g,e,l);return{success:!0,stackId:B,stackName:i,bucket:b("BucketName")||N,distributionId:b("DistributionId"),distributionDomain:l,domain:e,certificateArn:C,message:"Static site infrastructure is already up to date"}}else throw o}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${N}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${C}`),B=(await r.createStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${B}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(o){if(o.message?.includes("must be verified")||o.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let m=new y,b=await m.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let P=(await m.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V){console.log(`Using existing S3 bucket: ${V}`);let U=l.DomainName;if(U)await H(g,e,U);return{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
+}`}};let R={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},d=N?{Id:E,DomainName:w,CustomOriginConfig:{HTTPPort:x,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=N?E:`S3-${s}`,A={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:d?[d,R]:[R],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:j,CachedMethods:v,Compress:!0,...N?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...c&&I?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[I,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!c&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...N&&c?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:g?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&p)A.Aliases=e&&e.length>0?e:[u],A.ViewerCertificate={AcmCertificateArn:p,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else A.ViewerCertificate={CloudFrontDefaultCertificate:!0};return O.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...c&&N&&I?[I]:[],...!c?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:A}},B.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},B.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},O.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},B.SiteUrl={Description:"Site URL",Value:u?`https://${u}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s} (External DNS)`,Resources:O,Outputs:B}}async function nn(t){let s=t.region||"us-east-1",u="us-east-1",e=t.domain,p=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new f("us-east-1"),c=new oe("us-east-1"),g=null;if(!t.skipDnsVerification){g=T(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let o=await g.listRecords(e);if(!o.success){let n=o.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:p,message:`DNS provider '${g.name}' cannot manage domain ${e}: ${n}`}}console.log(`DNS provider '${g.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let C=t.certificateArn,E=e.split(".").length===2?`www.${e}`:void 0;if(!C){console.log(`Checking for existing SSL certificate for ${e}...`);let o=await c.findCertificateByDomain(e),n=!1;if(o&&o.Status==="ISSUED"){if(E&&o.SubjectAlternativeNames)n=o.SubjectAlternativeNames.includes(E)||o.SubjectAlternativeNames.some((m)=>m===`*.${e}`);else n=!0;if(n)C=o.CertificateArn,console.log(`Found existing certificate with www coverage: ${C}`);else console.log(`Existing certificate doesn't cover ${E}, requesting new one...`)}if(!C){if(!g)return{success:!1,stackName:i,bucket:p,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${E?` (including ${E})`:""}...`);let b=await new se(g,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:E?[E]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(b.status!=="issued")return{success:!1,stackName:i,bucket:p,message:`SSL certificate validation failed. Status: ${b.status}`};C=b.certificateArn,console.log(`Certificate issued: ${C}`)}}let M=!1,S;try{let o=await r.describeStacks({stackName:i});if(o.Stacks.length>0){let n=o.Stacks[0],m=n.StackStatus;if(m==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),M=!1;else if(m==="DELETE_COMPLETE")M=!1;else M=!0,S=(n.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(o){if(o.message?.includes("does not exist")||o.code==="ValidationError")M=!1;else throw o}let N=S||p;if(!M){let o=new a(s),n=new y,m=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let b=await n.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){m=!0,console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let P=(await n.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V)return console.log(`Using existing S3 bucket: ${V}`),{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!m)try{if((await o.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let l=o.emptyBucket(p).then(()=>o.deleteBucket(p)),D=new Promise((F,P)=>setTimeout(()=>P(Error("Bucket cleanup timeout")),30000));await Promise.race([l,D]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let D=Date.now().toString(36);N=`${p}-${D}`,console.log(`Using alternative bucket name: ${N}`)}}}catch{}}let v=ba({bucketName:N,domain:e,aliases:E?[e,E]:[e],certificateArn:C,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),O=Object.entries(t.tags||{}).map(([o,n])=>({Key:o,Value:n}));if(O.push({Key:"ManagedBy",Value:"ts-cloud"}),O.push({Key:"Application",Value:t.siteName}),g)O.push({Key:"DnsProvider",Value:g.name});let B,I=!1;if(M){I=!0,console.log(`Updating CloudFormation stack: ${i}`);try{B=(await r.updateStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O})).StackId,console.log(`Update initiated, stack ID: ${B}`)}catch(o){if(o.message?.includes("No updates are to be performed")){let n=await r.describeStacks({stackName:i});B=n.Stacks[0].StackId;let m=n.Stacks[0]?.Outputs||[],b=(D)=>m.find((F)=>F.OutputKey===D)?.OutputValue,l=b("DistributionDomain");if(l)await H(g,e,l);return{success:!0,stackId:B,stackName:i,bucket:b("BucketName")||N,distributionId:b("DistributionId"),distributionDomain:l,domain:e,certificateArn:C,message:"Static site infrastructure is already up to date"}}else throw o}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${N}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${C}`),B=(await r.createStack({stackName:i,templateBody:JSON.stringify(v),capabilities:["CAPABILITY_IAM"],tags:O,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${B}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(o){if(o.message?.includes("must be verified")||o.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let m=new y,b=await m.listDistributions();for(let l of b){let D=[];if(l.Aliases?.Items){if(Array.isArray(l.Aliases.Items))D=l.Aliases.Items;else if(typeof l.Aliases.Items==="object"){let F=l.Aliases.Items.CNAME;if(typeof F==="string")D=[F];else if(Array.isArray(F))D=F}}if(D.includes(e)){console.log(`Found existing CloudFront distribution ${l.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let P=(await m.getDistributionConfig(l.Id)).DistributionConfig?.Origins?.Items,V;if(P){let U=[];if(Array.isArray(P))U=P;else if(P.Origin)U=Array.isArray(P.Origin)?P.Origin:[P.Origin];else U=[P];for(let L of U){let W=(L.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(W){V=W[1];break}}}if(V){console.log(`Using existing S3 bucket: ${V}`);let U=l.DomainName;if(U)await H(g,e,U);return{success:!0,stackName:`existing-${l.Id}`,bucket:V,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:C,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
 ┌─────────────────────────────────────────────────────────────────────────────┐
 │  AWS ACCOUNT VERIFICATION REQUIRED                                          │
 ├─────────────────────────────────────────────────────────────────────────────┤
@@ -42,7 +42,7 @@ import{he,se,T,oe,or}from"./chunk-a1p70h5d.js";import{a}from"./chunk-6gtqjsg9.js
 │                                                                             │
 │  Verification typically takes 1-2 business days.                            │
 │  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${o.message}`}}let d=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(o)=>d.find((n)=>n.OutputKey===o)?.OutputValue,A=k("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await H(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:k("BucketName")||N,distributionId:k("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function H(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof he){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created Route53 alias record: ${r} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${u}`);let c=await t.upsertRecord(s,{name:r,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created CNAME record: ${r} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function sn(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await nn(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-jdq95b4h.js"),c=await r({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,x)=>{e?.("upload",`${C}/${w}: ${x}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-jdq95b4h.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function Vi(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${o.message}`}}let d=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(o)=>d.find((n)=>n.OutputKey===o)?.OutputValue,A=k("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await H(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:k("BucketName")||N,distributionId:k("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function H(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof fe){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created Route53 alias record: ${r} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${u}`);let c=await t.upsertRecord(s,{name:r,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${u}`);else console.log(`Created CNAME record: ${r} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function sn(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await nn(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-2ke75pzn.js"),c=await r({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,x)=>{e?.("upload",`${C}/${w}: ${x}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-2ke75pzn.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function Vi(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   const request = event.request;
   var uri = request.uri;
 
@@ -56,5 +56,5 @@ import{he,se,T,oe,or}from"./chunk-a1p70h5d.js";import{a}from"./chunk-6gtqjsg9.js
   }
 
   return request;
-}`}};let C={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&e)C.Aliases=[u],C.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else C.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(c.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:C}},g.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},g.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},c.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},u&&p)c.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},c.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},g.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s}`,Resources:c,Outputs:g}}async function ji(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let d=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!d)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return nn({siteName:t.siteName,region:t.region,domain:d,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",u="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let p=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new f(u),c=new h,g=new oe("us-east-1"),C=new or("us-east-1"),{hostedZoneId:w,certificateArn:x}=t;if(e&&!w){let d=await c.findHostedZoneForDomain(e);if(d)w=d.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:p,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!x&&w){let d=await g.findCertificateByDomain(e);if(d&&d.Status==="ISSUED")x=d.CertificateArn;else x=(await C.requestAndValidate({domainName:e,hostedZoneId:w,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let E=!1,M;try{let d=await r.describeStacks({stackName:i});if(d.Stacks.length>0){let k=d.Stacks[0],A=k.StackStatus;if(A==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),E=!1;else if(A==="DELETE_COMPLETE")E=!1;else E=!0,M=(k.Outputs||[]).find((n)=>n.OutputKey==="BucketName")?.OutputValue}}catch(d){if(d.message?.includes("does not exist")||d.code==="ValidationError")E=!1;else throw d}let S=M||p;if(!E){let d=new a(s),k=new y,A=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let o=await k.listDistributions();for(let n of o){let m=[];if(n.Aliases?.Items){if(Array.isArray(n.Aliases.Items))m=n.Aliases.Items;else if(typeof n.Aliases.Items==="object"){let b=n.Aliases.Items.CNAME;if(typeof b==="string")m=[b];else if(Array.isArray(b))m=b}}if(m.includes(e)){A=!0,console.log(`Found existing CloudFront distribution ${n.Id} for ${e}`);let l=(await k.getDistributionConfig(n.Id)).DistributionConfig?.Origins?.Items,D;if(l){let F=[];if(Array.isArray(l))F=l;else if(l.Origin)F=Array.isArray(l.Origin)?l.Origin:[l.Origin];else F=[l];for(let P of F){let U=(P.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(U){D=U[1];break}}}if(D){let F=e.replace(/\./g,"-");if(!D.startsWith(F)&&!D.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${D}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${D}`),w&&n.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(P){console.log(`Note: Could not update Route53 records: ${P.message}`)}return{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution"}}}}}catch{}if(w)try{let n=(await c.listResourceRecordSets({HostedZoneId:w})).ResourceRecordSets||[];for(let m of n)if(m.Name===`${e}.`&&(m.Type==="A"||m.Type==="AAAA")){if(m.AliasTarget){console.log(`Found orphaned Route53 ${m.Type} record for ${e}, cleaning up...`);try{await c.deleteRecord({HostedZoneId:w,RecordSet:m}),console.log(`Deleted orphaned Route53 ${m.Type} record for ${e}`)}catch(b){console.log(`Note: Could not delete Route53 record: ${b.message}`)}}}}catch{}}if(!A)try{if((await d.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let n=d.emptyBucket(p).then(()=>d.deleteBucket(p)),m=new Promise((b,l)=>setTimeout(()=>l(Error("Bucket cleanup timeout")),30000));await Promise.race([n,m]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(n){console.log(`Note: Could not clean up S3 bucket: ${n.message}`);let m=Date.now().toString(36);S=`${p}-${m}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let N=Vi({bucketName:S,domain:e,certificateArn:x,hostedZoneId:w,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),j=Object.entries(t.tags||{}).map(([d,k])=>({Key:d,Value:k}));j.push({Key:"ManagedBy",Value:"ts-cloud"}),j.push({Key:"Application",Value:t.siteName});let v,O=!1;if(E){O=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`);try{v=(await r.updateStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j})).StackId,console.log(`Update initiated, stack ID: ${v}`)}catch(d){if(d.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});v=k.Stacks[0].StackId;let A=k.Stacks[0]?.Outputs||[],o=(n)=>A.find((m)=>m.OutputKey===n)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:o("BucketName")||S,distributionId:o("DistributionId"),distributionDomain:o("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure is already up to date"}}else throw d}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`),console.log("Stack does not exist, creating..."),v=(await r.createStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${v}`);console.log(`Waiting for stack to reach ${O?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,O?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(d){if(d.message?.includes("must be verified")||d.message?.includes("Access denied for operation")||d.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new y;if(e)try{let A=await k.listDistributions();for(let o of A){let n=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))n=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let m=o.Aliases.Items.CNAME;if(typeof m==="string")n=[m];else if(Array.isArray(m))n=m}}if(n.includes(e)){console.log(`Found existing CloudFront distribution ${o.Id} with alias ${e}`);let b=(await k.getDistributionConfig(o.Id)).DistributionConfig?.Origins?.Items,l;if(b){let D=[];if(Array.isArray(b))D=b;else if(b.Origin)D=Array.isArray(b.Origin)?b.Origin:[b.Origin];else D=[b];for(let F of D){let V=(F.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(V){l=V[1];break}}}if(l)return console.log(`Using existing S3 bucket: ${l}`),{success:!0,stackName:`existing-${o.Id}`,bucket:l,distributionId:o.Id,distributionDomain:o.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let A=new a(s);if((await A.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await A.createBucket(S);await A.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await A.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let n=`OAC-${S}`;console.log(`Creating Origin Access Control: ${n}...`);let m=await k.findOrCreateOriginAccessControl(n);console.log(`Origin Access Control ${m.Id} ready`),console.log("Creating CloudFront distribution...");let b=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:m.Id,aliases:e?[e]:[],certificateArn:x,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${b.Id} created`),console.log("Updating S3 bucket policy...");let l=y.getS3BucketPolicyForCloudFront(S,b.ARN);if(await A.putBucketPolicy(S,l),console.log("S3 bucket policy updated"),e&&w){console.log(`Creating Route53 records for ${e}...`);try{await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(D){console.log(`Note: Could not create Route53 records: ${D.message}`)}}return{success:!0,stackName:`direct-${b.Id}`,bucket:S,distributionId:b.Id,distributionDomain:b.DomainName,domain:e,certificateArn:x,message:"Static site infrastructure created via direct API calls"}}catch(A){return console.log(`Direct API creation failed: ${A.message}`),{success:!1,stackId:v,stackName:i,bucket:S,message:`Deployment failed: ${A.message}`}}}return{success:!1,stackId:v,stackName:i,bucket:S,message:`Stack deployment failed: ${d.message}`}}let I=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],R=(d)=>I.find((k)=>k.OutputKey===d)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:R("BucketName")||S,distributionId:R("DistributionId"),distributionDomain:R("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure deployed successfully"}}async function zi(t){let{sourceDir:s,bucket:u,region:e,cacheControl:p="max-age=31536000, public",onProgress:i}=t,r=new a(e),{readdir:c}=await import("node:fs/promises"),{join:g,relative:C}=await import("node:path"),{createHash:w}=await import("node:crypto");async function x(I){let R=[],d=await c(I,{withFileTypes:!0});for(let k of d){let A=g(I,k.name);if(k.isDirectory())R.push(...await x(A));else R.push(A)}return R}function E(I){let R=I.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[R||""]||"application/octet-stream"}function M(I){return w("md5").update(I).digest("hex")}async function S(){let I=new Map,R;do{let d=await r.listObjects({bucket:u,maxKeys:1000,continuationToken:R});for(let k of d.objects){let A=k.ETag?.replace(/"/g,"")||"";I.set(k.Key,A)}R=d.nextContinuationToken}while(R);return I}let N=await x(s),j=[],v=0,O=0,B=await S();for(let I of N){let R=C(s,I),d=E(I),k=I.endsWith(".html")?"max-age=3600, public":p;try{let A=Buffer.from(await Bun.file(I).arrayBuffer()),o=M(A),n=B.get(R);if(n&&n===o){O++,i?.(v+O,N.length,R);continue}await r.putObject({bucket:u,key:R,body:A,contentType:d,cacheControl:k}),v++,i?.(v+O,N.length,R)}catch(A){j.push(`Failed to upload ${R}: ${A.message}`)}}return{uploaded:v,skipped:O,errors:j}}async function Ki(t){return{invalidationId:(await new y().invalidateAll(t)).Id}}async function Ca(t,s="us-east-1"){let u=new f(s);try{let r=((await u.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((c)=>c.OutputKey==="BucketName")?.OutputValue;if(r)await new a(s).emptyBucket(r)}catch{}await u.deleteStack(t);let e=await u.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function ba(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await ji(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(g){console.log(`Note: Could not clean bucket: ${g.message}`)}}e?.("upload","Uploading files to S3...");let r=await zi({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(g,C,w)=>{e?.("upload",`${g}/${C}: ${w}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await Ki(i.distributionId);e?.("complete","Deployment complete!");let c=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:c}}
-export{Sa,nn,sn,Vi,ji,zi,Ki,Ca,ba};
+}`}};let C={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(u&&e)C.Aliases=[u],C.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else C.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(c.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:C}},g.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},g.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},c.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},u&&p)c.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},c.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:p,Name:u,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},g.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${u||s}`,Resources:c,Outputs:g}}async function ji(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let d=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!d)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return nn({siteName:t.siteName,region:t.region,domain:d,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",u="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let p=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new f(u),c=new h,g=new oe("us-east-1"),C=new or("us-east-1"),{hostedZoneId:w,certificateArn:x}=t;if(e&&!w){let d=await c.findHostedZoneForDomain(e);if(d)w=d.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:p,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!x&&w){let d=await g.findCertificateByDomain(e);if(d&&d.Status==="ISSUED")x=d.CertificateArn;else x=(await C.requestAndValidate({domainName:e,hostedZoneId:w,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let E=!1,M;try{let d=await r.describeStacks({stackName:i});if(d.Stacks.length>0){let k=d.Stacks[0],A=k.StackStatus;if(A==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),E=!1;else if(A==="DELETE_COMPLETE")E=!1;else E=!0,M=(k.Outputs||[]).find((n)=>n.OutputKey==="BucketName")?.OutputValue}}catch(d){if(d.message?.includes("does not exist")||d.code==="ValidationError")E=!1;else throw d}let S=M||p;if(!E){let d=new a(s),k=new y,A=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let o=await k.listDistributions();for(let n of o){let m=[];if(n.Aliases?.Items){if(Array.isArray(n.Aliases.Items))m=n.Aliases.Items;else if(typeof n.Aliases.Items==="object"){let b=n.Aliases.Items.CNAME;if(typeof b==="string")m=[b];else if(Array.isArray(b))m=b}}if(m.includes(e)){A=!0,console.log(`Found existing CloudFront distribution ${n.Id} for ${e}`);let l=(await k.getDistributionConfig(n.Id)).DistributionConfig?.Origins?.Items,D;if(l){let F=[];if(Array.isArray(l))F=l;else if(l.Origin)F=Array.isArray(l.Origin)?l.Origin:[l.Origin];else F=[l];for(let P of F){let U=(P.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(U){D=U[1];break}}}if(D){let F=e.replace(/\./g,"-");if(!D.startsWith(F)&&!D.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${D}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${D}`),w&&n.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:n.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(P){console.log(`Note: Could not update Route53 records: ${P.message}`)}return{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution"}}}}}catch{}if(w)try{let n=(await c.listResourceRecordSets({HostedZoneId:w})).ResourceRecordSets||[];for(let m of n)if(m.Name===`${e}.`&&(m.Type==="A"||m.Type==="AAAA")){if(m.AliasTarget){console.log(`Found orphaned Route53 ${m.Type} record for ${e}, cleaning up...`);try{await c.deleteRecord({HostedZoneId:w,RecordSet:m}),console.log(`Deleted orphaned Route53 ${m.Type} record for ${e}`)}catch(b){console.log(`Note: Could not delete Route53 record: ${b.message}`)}}}}catch{}}if(!A)try{if((await d.headBucket(p)).exists){console.log(`Found orphaned S3 bucket ${p}, cleaning up...`);try{let n=d.emptyBucket(p).then(()=>d.deleteBucket(p)),m=new Promise((b,l)=>setTimeout(()=>l(Error("Bucket cleanup timeout")),30000));await Promise.race([n,m]),console.log(`Deleted orphaned S3 bucket ${p}`)}catch(n){console.log(`Note: Could not clean up S3 bucket: ${n.message}`);let m=Date.now().toString(36);S=`${p}-${m}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let N=Vi({bucketName:S,domain:e,certificateArn:x,hostedZoneId:w,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),j=Object.entries(t.tags||{}).map(([d,k])=>({Key:d,Value:k}));j.push({Key:"ManagedBy",Value:"ts-cloud"}),j.push({Key:"Application",Value:t.siteName});let v,O=!1;if(E){O=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`);try{v=(await r.updateStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j})).StackId,console.log(`Update initiated, stack ID: ${v}`)}catch(d){if(d.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});v=k.Stacks[0].StackId;let A=k.Stacks[0]?.Outputs||[],o=(n)=>A.find((m)=>m.OutputKey===n)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:o("BucketName")||S,distributionId:o("DistributionId"),distributionDomain:o("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure is already up to date"}}else throw d}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${x||"not specified"}`),console.log("Stack does not exist, creating..."),v=(await r.createStack({stackName:i,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:j,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${v}`);console.log(`Waiting for stack to reach ${O?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,O?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(d){if(d.message?.includes("must be verified")||d.message?.includes("Access denied for operation")||d.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new y;if(e)try{let A=await k.listDistributions();for(let o of A){let n=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))n=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let m=o.Aliases.Items.CNAME;if(typeof m==="string")n=[m];else if(Array.isArray(m))n=m}}if(n.includes(e)){console.log(`Found existing CloudFront distribution ${o.Id} with alias ${e}`);let b=(await k.getDistributionConfig(o.Id)).DistributionConfig?.Origins?.Items,l;if(b){let D=[];if(Array.isArray(b))D=b;else if(b.Origin)D=Array.isArray(b.Origin)?b.Origin:[b.Origin];else D=[b];for(let F of D){let V=(F.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(V){l=V[1];break}}}if(l)return console.log(`Using existing S3 bucket: ${l}`),{success:!0,stackName:`existing-${o.Id}`,bucket:l,distributionId:o.Id,distributionDomain:o.DomainName,domain:e,certificateArn:x,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let A=new a(s);if((await A.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await A.createBucket(S);await A.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await A.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let n=`OAC-${S}`;console.log(`Creating Origin Access Control: ${n}...`);let m=await k.findOrCreateOriginAccessControl(n);console.log(`Origin Access Control ${m.Id} ready`),console.log("Creating CloudFront distribution...");let b=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:m.Id,aliases:e?[e]:[],certificateArn:x,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${b.Id} created`),console.log("Updating S3 bucket policy...");let l=y.getS3BucketPolicyForCloudFront(S,b.ARN);if(await A.putBucketPolicy(S,l),console.log("S3 bucket policy updated"),e&&w){console.log(`Creating Route53 records for ${e}...`);try{await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),await c.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:h.CloudFrontHostedZoneId,TargetDNSName:b.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(D){console.log(`Note: Could not create Route53 records: ${D.message}`)}}return{success:!0,stackName:`direct-${b.Id}`,bucket:S,distributionId:b.Id,distributionDomain:b.DomainName,domain:e,certificateArn:x,message:"Static site infrastructure created via direct API calls"}}catch(A){return console.log(`Direct API creation failed: ${A.message}`),{success:!1,stackId:v,stackName:i,bucket:S,message:`Deployment failed: ${A.message}`}}}return{success:!1,stackId:v,stackName:i,bucket:S,message:`Stack deployment failed: ${d.message}`}}let I=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],R=(d)=>I.find((k)=>k.OutputKey===d)?.OutputValue;return{success:!0,stackId:v,stackName:i,bucket:R("BucketName")||S,distributionId:R("DistributionId"),distributionDomain:R("DistributionDomain"),domain:e,certificateArn:x,message:"Static site infrastructure deployed successfully"}}async function zi(t){let{sourceDir:s,bucket:u,region:e,cacheControl:p="max-age=31536000, public",onProgress:i}=t,r=new a(e),{readdir:c}=await import("node:fs/promises"),{join:g,relative:C}=await import("node:path"),{createHash:w}=await import("node:crypto");async function x(I){let R=[],d=await c(I,{withFileTypes:!0});for(let k of d){let A=g(I,k.name);if(k.isDirectory())R.push(...await x(A));else R.push(A)}return R}function E(I){let R=I.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[R||""]||"application/octet-stream"}function M(I){return w("md5").update(I).digest("hex")}async function S(){let I=new Map,R;do{let d=await r.listObjects({bucket:u,maxKeys:1000,continuationToken:R});for(let k of d.objects){let A=k.ETag?.replace(/"/g,"")||"";I.set(k.Key,A)}R=d.nextContinuationToken}while(R);return I}let N=await x(s),j=[],v=0,O=0,B=await S();for(let I of N){let R=C(s,I),d=E(I),k=I.endsWith(".html")?"max-age=3600, public":p;try{let A=Buffer.from(await Bun.file(I).arrayBuffer()),o=M(A),n=B.get(R);if(n&&n===o){O++,i?.(v+O,N.length,R);continue}await r.putObject({bucket:u,key:R,body:A,contentType:d,cacheControl:k}),v++,i?.(v+O,N.length,R)}catch(A){j.push(`Failed to upload ${R}: ${A.message}`)}}return{uploaded:v,skipped:O,errors:j}}async function Ki(t){return{invalidationId:(await new y().invalidateAll(t)).Id}}async function Ea(t,s="us-east-1"){let u=new f(s);try{let r=((await u.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((c)=>c.OutputKey==="BucketName")?.OutputValue;if(r)await new a(s).emptyBucket(r)}catch{}await u.deleteStack(t);let e=await u.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function va(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await ji(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new a(p.region||"us-east-1").emptyBucket(i.bucket)}catch(g){console.log(`Note: Could not clean bucket: ${g.message}`)}}e?.("upload","Uploading files to S3...");let r=await zi({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(g,C,w)=>{e?.("upload",`${g}/${C}: ${w}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await Ki(i.distributionId);e?.("complete","Deployment complete!");let c=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:c}}
+export{ba,nn,sn,Vi,ji,zi,Ki,Ea,va};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{Jr,Xr,wl,Mi,Rl,Dl,Pl,na,Nl,kl,bm,Bl,S,xl,Fi,Re,_l,Ol,DA,Ll,Em,PA,NA,kA,vm,Tm,BA,xA,wm,Rm,_A,Ui,Wt,ia,Yr,Zr,Jt,Je,It,Qi,Dm,en,$l,Ml,sa,Gi,rn,qi,Ia}from"../chunk-t5tvt2r3.js";import{Sa,nn,sn,Vi,ji,zi,Ki,Ca,ba}from"../chunk-j7vsrx9g.js";import{Ea}from"../chunk-w5fmaaxa.js";import"../chunk-hyj2ymp1.js";import"../chunk-ngdhqwf3.js";import"../chunk-8s9m8pyb.js";import"../chunk-z7v4evbh.js";import"../chunk-mcfdtg5w.js";import"../chunk-a1p70h5d.js";import"../chunk-65ajja2a.js";import{eu,$a,fe,Ma,yn,tu,Fa,cc,ys,dc,Nt,zn,Is}from"../chunk-vk513ge7.js";import"../chunk-dzqz1sm0.js";import"../chunk-0g2jkhy5.js";import"../chunk-6gtqjsg9.js";import"../chunk-2s65yj3g.js";import{ot,Bh,hc,Yn,Zn,ei,Zu}from"../chunk-ds92qg3g.js";import{B,Ir,Sr,fc,bs,u,xh,ep,tp,uy,py}from"../chunk-m5r0dt28.js";import"../chunk-xqx5szta.js";import"../chunk-y13zcbnp.js";export{Bh as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ma as IPV6_EXCLUDED_HOST_LABELS,cc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,Zu as allocateSitePorts,_A as buildAndPushContainerImage,Ea as buildAndPushServerlessImage,Wt as buildFunctionEnv,Zn as buildHostSitePortsScript,Is as buildManagementDashboardArtifact,It as buildServerTopology,Qi as buildServerlessTopology,Dm as buildTopology,sa as collectEgressMetrics,eu as collectServerDnsDomains,Rm as createContainerImageDependencies,vm as createExistingStaticFullStackDependencies,Em as createStaticApiOriginDependencies,rn as dashboardActions,ys as dashboardCredentialsFile,_l as dashboardPageRoutes,Ca as deleteStaticSite,BA as deployExistingStaticFullStack,ia as deployServerlessApp,py as deployShipsFiles,Ll as deploySite,PA as deployStaticApiOrigin,ji as deployStaticSite,ba as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,$l as egressReportMetrics,S as ensureDashboardActor,zn as ensureManagementDashboard,xA as estimateExistingStaticFullStackMonthlyCost,kA as estimateStaticApiOriginMonthlyCost,Ml as fetchEgressReport,Tm as generateExistingStaticFullStackTemplate,Sa as generateExternalDnsStaticSiteTemplate,Vi as generateStaticSiteTemplate,xh as hasComputeConfigured,fc as hasProxyUpstream,wm as hashContainerContext,yn as hostAcceptsIpv6,Ui as infraEnvFromOutputs,xl as initializeDashboardControlPlane,Ki as invalidateCache,Ir as isPhpSite,na as isValidHostname,fe as normalizePublicIpv6,Yn as occupiedHostPorts,ei as parseHostSiteFragments,hc as parseUpstreamPort,tu as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,$a as removeStaleServerAddressRecords,Nl as renderAliasesValue,Pl as renderEnvValue,kl as renderRedirectsValue,bm as renderSiteSnippet,Rl as renderSslValue,Dl as renderStringValue,qi as resolveDashboardAction,dc as resolveDashboardAuth,en as resolveDashboardData,Ol as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,bs as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,DA as routesForDashboard,Je as runRemoteCommand,Gi as sanitizeCloudConfig,Bl as setAttachToInCloudConfig,Jt as setMaintenance,Mi as setSitePropertyInCloudConfig,tp as shipsARelease,uy as shipsToBucket,B as siteInstallBase,Ia as startLocalDashboardServer,Fi as synchronizeDashboardUsers,Re as trackDashboardOperation,wl as updateSiteInCloudConfig,zi as uploadStaticFiles,ep as validateDeploymentConfig,Fa as verifyAddressRecord,NA as verifyStaticApiOrigin};
+import{Jr,Xr,Dl,Mi,Pl,Nl,kl,sa,Bl,xl,vm,_l,S,Ol,Fi,De,Ll,$l,NA,Ml,Tm,kA,BA,xA,wm,Rm,_A,OA,Dm,Pm,LA,Ui,Wt,oa,Yr,Zr,Jt,Je,It,Qi,Nm,en,Fl,Ul,aa,Gi,rn,qi,Ca}from"../chunk-2k1tc16d.js";import{ba,nn,sn,Vi,ji,zi,Ki,Ea,va}from"../chunk-zhg1kvw3.js";import{Ta}from"../chunk-jnt7ab86.js";import"../chunk-bkv2p4hp.js";import"../chunk-srh0ctd4.js";import"../chunk-sxtgx8fj.js";import"../chunk-cwjskpj4.js";import"../chunk-1bxqrj7m.js";import"../chunk-kfwg1c6q.js";import"../chunk-t054j0zn.js";import{ru,Fa,Ae,Ua,yn,nu,Qa,lc,Ss,uc,Nt,zn,Cs}from"../chunk-b2b79jtk.js";import"../chunk-etmbw4er.js";import"../chunk-trsaqsgv.js";import"../chunk-t5e5phth.js";import"../chunk-4w8d2mf0.js";import{ot,_h,Ac,Yn,Zn,ei,tp}from"../chunk-tg6yasej.js";import{B,Ir,Sr,yc,vs,u,Oh,rp,np,gy,my}from"../chunk-xacvkpf8.js";import"../chunk-dky93h4d.js";import"../chunk-b9pm7mbd.js";export{_h as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ua as IPV6_EXCLUDED_HOST_LABELS,lc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,tp as allocateSitePorts,LA as buildAndPushContainerImage,Ta as buildAndPushServerlessImage,Wt as buildFunctionEnv,Zn as buildHostSitePortsScript,Cs as buildManagementDashboardArtifact,It as buildServerTopology,Qi as buildServerlessTopology,Nm as buildTopology,aa as collectEgressMetrics,ru as collectServerDnsDomains,Pm as createContainerImageDependencies,wm as createExistingStaticFullStackDependencies,Tm as createStaticApiOriginDependencies,rn as dashboardActions,Ss as dashboardCredentialsFile,Ll as dashboardPageRoutes,Ea as deleteStaticSite,_A as deployExistingStaticFullStack,oa as deployServerlessApp,my as deployShipsFiles,Ml as deploySite,kA as deployStaticApiOrigin,ji as deployStaticSite,va as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,Fl as egressReportMetrics,S as ensureDashboardActor,zn as ensureManagementDashboard,OA as estimateExistingStaticFullStackMonthlyCost,xA as estimateStaticApiOriginMonthlyCost,Ul as fetchEgressReport,Rm as generateExistingStaticFullStackTemplate,ba as generateExternalDnsStaticSiteTemplate,Vi as generateStaticSiteTemplate,Oh as hasComputeConfigured,yc as hasProxyUpstream,Dm as hashContainerContext,yn as hostAcceptsIpv6,Ui as infraEnvFromOutputs,Ol as initializeDashboardControlPlane,Ki as invalidateCache,Ir as isPhpSite,sa as isValidHostname,Ae as normalizePublicIpv6,Yn as occupiedHostPorts,ei as parseHostSiteFragments,Ac as parseUpstreamPort,nu as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,Fa as removeStaleServerAddressRecords,Bl as renderAliasesValue,kl as renderEnvValue,xl as renderRedirectsValue,vm as renderSiteSnippet,Pl as renderSslValue,Nl as renderStringValue,qi as resolveDashboardAction,uc as resolveDashboardAuth,en as resolveDashboardData,$l as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,vs as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,NA as routesForDashboard,Je as runRemoteCommand,Gi as sanitizeCloudConfig,_l as setAttachToInCloudConfig,Jt as setMaintenance,Mi as setSitePropertyInCloudConfig,np as shipsARelease,gy as shipsToBucket,B as siteInstallBase,Ca as startLocalDashboardServer,Fi as synchronizeDashboardUsers,De as trackDashboardOperation,Dl as updateSiteInCloudConfig,zi as uploadStaticFiles,rp as validateDeploymentConfig,Qa as verifyAddressRecord,BA as verifyStaticApiOrigin};

package/dist/dns/cloudflare-managed-headers.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/dns/cloudflare.d.ts

@@ -10,6 +10,25 @@ export interface CloudflareZoneSetting {
     editable?: boolean;
     modified_on?: string | null;
 }
+/**
+ * The zone's managed header transforms, as `/zones/{id}/managed_headers`
+ * returns them.
+ *
+ * Cloudflare answers with the whole catalogue whether or not any are on, so
+ * `enabled: false` entries are the normal state and not an absence.
+ */
+export interface CloudflareManagedHeaders {
+    managed_request_headers?: Array<{
+        id: string;
+        enabled?: boolean;
+        has_conflict?: boolean;
+    }>;
+    managed_response_headers?: Array<{
+        id: string;
+        enabled?: boolean;
+        has_conflict?: boolean;
+    }>;
+}
 /**
  * A rule inside a phase entrypoint ruleset (cache rules, transform rules, …).
  * Only the fields ts-cloud writes or has to preserve are modelled.
@@ -211,6 +230,39 @@ export declare class CloudflareProvider implements DnsProvider {
             error: string;
         }>;
     }>;
+    /**
+     * Read the zone's managed request-header transforms, keyed by id.
+     *
+     * A zone that has never had one configured answers with the full catalogue
+     * and every entry disabled, so this needs no empty-state handling.
+     */
+    getManagedRequestHeaders(domain: string): Promise<Record<string, boolean>>;
+    /**
+     * Turn managed request-header transforms on or off, skipping any already set.
+     *
+     * These are not zone settings and do not live under `/settings` — Cloudflare
+     * models them as header transforms, which is why enabling visitor location
+     * headers cannot be done through {@link applyZoneSettings}. They matter
+     * because `CF-IPCountry` is the ONLY geo header a zone sends by default: an
+     * origin reading `cf-ipcity` or `cf-iplatitude` gets nothing at all until
+     * `add_visitor_location_headers` is enabled, and nothing about that failure
+     * is visible from the edge — the request arrives, it is simply missing the
+     * headers the origin was written against.
+     *
+     * Failures are collected, not thrown, for the same reason as zone settings:
+     * one unavailable transform must not abort a deploy that already shipped.
+     */
+    applyManagedRequestHeaders(domain: string, desired: Record<string, boolean>): Promise<{
+        changed: Array<{
+            id: string;
+            from: unknown;
+            to: unknown;
+        }>;
+        failed: Array<{
+            id: string;
+            error: string;
+        }>;
+    }>;
     /**
      * Read the rules currently in a phase entrypoint ruleset.
      *

package/dist/dns/delegate-from-config.d.ts

@@ -20,6 +20,14 @@ export interface DelegationConfig {
         dryRun?: boolean;
         delegate?: boolean;
     };
+    zone?: ZoneSettingsConfig;
+}
+/** Zone settings a deploy keeps true. Mirrors `DnsZoneConfig` in core. */
+export interface ZoneSettingsConfig {
+    ssl?: 'off' | 'flexible' | 'full' | 'strict';
+    alwaysUseHttps?: boolean;
+    minTlsVersion?: '1.0' | '1.1' | '1.2' | '1.3';
+    visitorLocationHeaders?: boolean;
 }
 export interface DelegationCredentials {
     porkbunApiKey?: string;
@@ -48,3 +56,35 @@ export declare function delegateZoneFromConfig(config: DelegationConfig, options
 }): Promise<DelegationReport | DelegationSkipped>;
 /** One line per outcome, for a deploy log. */
 export declare function describeDelegation(result: DelegationReport | DelegationSkipped): string[];
+export interface ZoneSettingsReport {
+    status: 'applied' | 'unchanged';
+    domain: string;
+    changed: Array<{
+        id: string;
+        from: unknown;
+        to: unknown;
+    }>;
+    failed: Array<{
+        id: string;
+        error: string;
+    }>;
+}
+/**
+ * Reconcile `dns.zone` against the provider, on every deploy.
+ *
+ * Separate from the delegation on purpose: delegating happens once, but a zone
+ * setting is something a person can change in a dashboard at any time, and the
+ * point of declaring it is that the next deploy puts it back. Running only at
+ * delegation would make `ssl: 'strict'` true exactly once and then let it
+ * drift for the life of the zone.
+ *
+ * A setting the plan does not allow is reported, never thrown — `applyZoneSettings`
+ * collects those, and one unavailable toggle must not fail a deploy that has
+ * already shipped code.
+ */
+export declare function applyDeclaredZoneSettings(config: DelegationConfig, options?: {
+    credentials?: DelegationCredentials;
+    env?: Record<string, string | undefined>;
+}): Promise<ZoneSettingsReport | DelegationSkipped>;
+/** One line per outcome, for a deploy log. */
+export declare function describeZoneSettings(result: ZoneSettingsReport | DelegationSkipped): string[];

package/dist/dns/index.d.ts

@@ -10,8 +10,8 @@ export type { DeclaredRecord, DeclaredRecordInput, DeclaredRecordOutcome, Declar
 export { policyTag, qualifyName, reconcileDeclaredRecords, resolveDeclaredRecords, } from './declared-records';
 export type { DelegationOptions, DelegationRecordOutcome, DelegationReport, DelegationStatus, NameserverRegistrar, ZoneHost, } from './delegation';
 export { delegateZone, isNameserverRegistrar, isZoneHost, sameNameservers, } from './delegation';
-export type { DelegationConfig, DelegationCredentials, DelegationSkipped, } from './delegate-from-config';
-export { delegateZoneFromConfig, describeDelegation, } from './delegate-from-config';
+export type { DelegationConfig, DelegationCredentials, DelegationSkipped, ZoneSettingsConfig, ZoneSettingsReport, } from './delegate-from-config';
+export { applyDeclaredZoneSettings, delegateZoneFromConfig, describeDelegation, describeZoneSettings, } from './delegate-from-config';
 export { Route53Provider } from './route53-adapter';
 export type { MigratedRecord, SkippedRecord, ZoneMigrationPlan, ZoneMigrationReport, ZoneParityReport, } from './zone-migration';
 export { applyZoneMigration, exportRoute53Zone, planZoneMigration, verifyZoneParity, } from './zone-migration';

package/dist/dns/index.js

@@ -1 +1 @@
-import{tt,ie,ke,Be,Tt,hn,rs,ns,nr,ir,fn,sr,is,ss,he,os,as,cs,ds,se,ls,us,ps,T,Oa,An,La}from"../chunk-a1p70h5d.js";import"../chunk-65ajja2a.js";import"../chunk-2s65yj3g.js";export{Be as CloudflareProvider,An as DnsProviderFactory,ke as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,ie as PorkbunProvider,he as Route53Provider,se as UnifiedDnsValidator,cs as applyZoneMigration,T as createDnsProvider,us as createGoDaddyValidator,ls as createPorkbunValidator,ps as createRoute53Validator,sr as delegateZone,is as delegateZoneFromConfig,ss as describeDelegation,Oa as detectDnsProvider,La as dnsProviders,os as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,as as planZoneMigration,Tt as policyTag,hn as qualifyName,ns as reconcileDeclaredRecords,rs as resolveDeclaredRecords,fn as sameNameservers,ds as verifyZoneParity};
+import{tt,ie,Be,he,Tt,hn,rs,ns,nr,ir,fn,sr,is,ss,os,as,fe,cs,ds,ls,us,se,ps,gs,ms,T,$a,An,Ma}from"../chunk-kfwg1c6q.js";import"../chunk-t054j0zn.js";import"../chunk-4w8d2mf0.js";export{he as CloudflareProvider,An as DnsProviderFactory,Be as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,ie as PorkbunProvider,fe as Route53Provider,se as UnifiedDnsValidator,os as applyDeclaredZoneSettings,ls as applyZoneMigration,T as createDnsProvider,gs as createGoDaddyValidator,ps as createPorkbunValidator,ms as createRoute53Validator,sr as delegateZone,is as delegateZoneFromConfig,ss as describeDelegation,as as describeZoneSettings,$a as detectDnsProvider,Ma as dnsProviders,cs as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,ds as planZoneMigration,Tt as policyTag,hn as qualifyName,ns as reconcileDeclaredRecords,rs as resolveDeclaredRecords,fn as sameNameservers,us as verifyZoneParity};

package/dist/drivers/index.js

@@ -1 +1 @@
-import{In,wt,ar,Rt,Sn,Cn,bn,En,su,Ua,z,lr,qm,vn,Qa,xe,Ae,_e,N,ur,Tn,pr,ae,Ha,wn,Ga,Rn,qa,gr,ja,Oe,K,za,rt,Le,$e,nt,ye,hs,Ka,ou,au,Wa,cu,it,Dn,Ja,du,lu,Xa,mr,Ie,Ya,uu,pu,fs,Pn,st,gu,mu,hu,fu,Au,yu,Iu,Su,Cu,Nn,kn,Bn,xn,_n,On,Ln,bu,Eu,hr,k,As,vu,Tu,wu,Za,Ru,Du,Vm,ec,jm,zm,Pu,Nu,Km,Wm,Jm,tc,ku,Xm,Ym,Zm,$n,Mn,Un,Qn,rc,nc,ic,sc,eh,Hn,Gn,qn,Vn,oc,ac,jn,Ss,lc,Kn,uc,th,rh,nh,ih}from"../chunk-vk513ge7.js";import"../chunk-dzqz1sm0.js";import"../chunk-0g2jkhy5.js";import"../chunk-6gtqjsg9.js";import"../chunk-2s65yj3g.js";import"../chunk-m5r0dt28.js";import"../chunk-y13zcbnp.js";export{sc as AwsBoxProvisioner,ur as AwsDriver,wu as BOOT_PARTITION_LABEL,As as CloudDriverFactory,Cn as DEFAULT_RPX_CERTS_DIR,Tu as FIRST_BOOT_SCRIPT_PATH,ic as HetznerBoxProvisioner,gr as HetznerClient,ye as HetznerDriver,za as LEGACY_DRIVER_STATE_DIR,hs as LocalBoxDriver,rh as MANAGED_CACHE_POLICY_DISABLED,th as MANAGED_CACHE_POLICY_OPTIMIZED,nh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,pu as RASPBERRY_PI_DEFAULT_SWAP_GB,qa as REMOTE_SCRIPT_RUNNER,vn as RPX_DIR,Qa as RPX_LAUNCHER_PATH,xe as RPX_SERVICE_NAME,Ya as SSH_BOOTSTRAP_MARKER_DIR,Ie as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,Ln as SSH_DEPLOY_STORAGE_PATH,ou as SSH_INSECURE_HOST_KEY_OPTS,au as SSH_KEEPALIVE_OPTS,kn as SSH_PREFLIGHT_SCRIPT,bu as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,rc as UBUNTU_2404_AMI_PARAM,Zm as acquireResizeLock,Km as applyHetznerHostOptimization,fs as assertArchSupported,Eu as assertSshComputeConfig,oc as buildAwsArtifactFetch,nc as buildBoxUserData,ih as buildCloudFrontOriginConfig,Za as buildCloudInitFirstBoot,Nu as buildHetznerHostOptimizationScript,jn as buildHostCleanupScript,ac as buildLocalArtifactFetch,z as buildRpxConfig,_e as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,Ae as buildRpxProvisionScript,cu as buildScpArgsFor,Gn as buildSiteDeployScript,Tn as buildSshArgs,Wa as buildSshArgsFor,Pn as buildSshBootstrapScript,qn as buildStaticSiteDeployScript,vu as cloudDrivers,Wm as collectHetznerHostOptimizationReport,ec as collectHetznerResizeManifest,eh as createBoxProvisioner,k as createCloudDriver,lc as deployAllComputeSites,Ss as deploySiteRelease,Ua as deriveRouteId,In as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Mn as ensureFirewall,Un as ensureServer,$n as ensureSshKey,xn as evaluatePreflight,Vm as executeHetznerServerResize,lu as findKnownHostKey,On as formatPreflightFindings,wt as formatSshFailure,En as gatewayHostnames,N as generateUbuntuAppCloudInit,bn as hasAutoWwwVariant,Ka as isBoxMode,Du as isHetznerCapacityError,Sn as isLocalDatabase,du as knownHostsLine,Ja as knownHostsToken,su as normalizeRoutePath,Oe as normalizeSshPublicKey,Bn as parsePreflightFacts,Ru as planHetznerServerResize,_n as preflightFailed,jm as prepareHetznerResize,$e as readDriverState,Xm as readResizeCheckpoint,Vn as releaseTarballTmpPath,Kn as reloadRpxGateway,Rn as remoteScriptRunner,qm as renderRpxLauncher,uc as renewRpxCertificates,tc as resizeCheckpointPath,ku as resizeLockPath,Hn as resolveExecStart,ja as resolveHetznerApiToken,Pu as resolveHetznerHostOptimizationPlan,Au as resolveSshHostKeyPolicy,gu as resolveSshHosts,Cu as resolveSshLan,hu as resolveSshPort,fu as resolveSshPrivateKeyPath,Iu as resolveSshProfile,Su as resolveSshPublicIp,Nn as resolveSshSettings,yu as resolveSshSudo,mu as resolveSshUser,Dn as scanHostKey,Ha as scpUpload,Qn as serverPublicIpv4,uu as sshBootstrapMarkerPath,pr as sshExec,ae as sshExecOrThrow,it as sshHostKeyFingerprint,Xa as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,Jm as verifyHetznerHostOptimization,zm as verifyHetznerResize,Ga as waitForCloudInit,wn as waitForSsh,K as wrapCloudInitUserData,nt as writeDriverState,Ym as writeResizeCheckpoint};
+import{In,wt,ar,Rt,Sn,Cn,bn,En,au,Ha,z,lr,jm,vn,Ga,xe,ye,_e,N,ur,Tn,pr,ae,qa,wn,Va,Rn,ja,gr,Ka,Oe,K,Wa,rt,Le,$e,nt,Ie,As,Ja,cu,du,Xa,lu,it,Dn,Ya,uu,pu,Za,mr,Se,ec,gu,mu,ys,Pn,st,hu,fu,Au,yu,Iu,Su,Cu,bu,Eu,Nn,kn,Bn,xn,_n,On,Ln,vu,Tu,hr,k,Is,wu,Ru,Du,tc,Pu,Nu,zm,rc,Km,Wm,ku,Bu,Jm,Xm,Ym,nc,xu,Zm,eh,th,$n,Mn,Un,Qn,ic,sc,oc,ac,rh,Hn,Gn,qn,Vn,cc,dc,jn,bs,pc,Kn,gc,nh,ih,sh,oh}from"../chunk-b2b79jtk.js";import"../chunk-etmbw4er.js";import"../chunk-trsaqsgv.js";import"../chunk-t5e5phth.js";import"../chunk-4w8d2mf0.js";import"../chunk-xacvkpf8.js";import"../chunk-b9pm7mbd.js";export{ac as AwsBoxProvisioner,ur as AwsDriver,Du as BOOT_PARTITION_LABEL,Is as CloudDriverFactory,Cn as DEFAULT_RPX_CERTS_DIR,Ru as FIRST_BOOT_SCRIPT_PATH,oc as HetznerBoxProvisioner,gr as HetznerClient,Ie as HetznerDriver,Wa as LEGACY_DRIVER_STATE_DIR,As as LocalBoxDriver,ih as MANAGED_CACHE_POLICY_DISABLED,nh as MANAGED_CACHE_POLICY_OPTIMIZED,sh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,mu as RASPBERRY_PI_DEFAULT_SWAP_GB,ja as REMOTE_SCRIPT_RUNNER,vn as RPX_DIR,Ga as RPX_LAUNCHER_PATH,xe as RPX_SERVICE_NAME,ec as SSH_BOOTSTRAP_MARKER_DIR,Se as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,Ln as SSH_DEPLOY_STORAGE_PATH,cu as SSH_INSECURE_HOST_KEY_OPTS,du as SSH_KEEPALIVE_OPTS,kn as SSH_PREFLIGHT_SCRIPT,vu as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,ic as UBUNTU_2404_AMI_PARAM,th as acquireResizeLock,Jm as applyHetznerHostOptimization,ys as assertArchSupported,Tu as assertSshComputeConfig,cc as buildAwsArtifactFetch,sc as buildBoxUserData,oh as buildCloudFrontOriginConfig,tc as buildCloudInitFirstBoot,Bu as buildHetznerHostOptimizationScript,jn as buildHostCleanupScript,dc as buildLocalArtifactFetch,z as buildRpxConfig,_e as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,ye as buildRpxProvisionScript,lu as buildScpArgsFor,Gn as buildSiteDeployScript,Tn as buildSshArgs,Xa as buildSshArgsFor,Pn as buildSshBootstrapScript,qn as buildStaticSiteDeployScript,wu as cloudDrivers,Xm as collectHetznerHostOptimizationReport,rc as collectHetznerResizeManifest,rh as createBoxProvisioner,k as createCloudDriver,pc as deployAllComputeSites,bs as deploySiteRelease,Ha as deriveRouteId,In as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Mn as ensureFirewall,Un as ensureServer,$n as ensureSshKey,xn as evaluatePreflight,zm as executeHetznerServerResize,pu as findKnownHostKey,On as formatPreflightFindings,wt as formatSshFailure,En as gatewayHostnames,N as generateUbuntuAppCloudInit,bn as hasAutoWwwVariant,Ja as isBoxMode,Nu as isHetznerCapacityError,Sn as isLocalDatabase,uu as knownHostsLine,Ya as knownHostsToken,au as normalizeRoutePath,Oe as normalizeSshPublicKey,Bn as parsePreflightFacts,Pu as planHetznerServerResize,_n as preflightFailed,Km as prepareHetznerResize,$e as readDriverState,Zm as readResizeCheckpoint,Vn as releaseTarballTmpPath,Kn as reloadRpxGateway,Rn as remoteScriptRunner,jm as renderRpxLauncher,gc as renewRpxCertificates,nc as resizeCheckpointPath,xu as resizeLockPath,Hn as resolveExecStart,Ka as resolveHetznerApiToken,ku as resolveHetznerHostOptimizationPlan,Iu as resolveSshHostKeyPolicy,hu as resolveSshHosts,Eu as resolveSshLan,Au as resolveSshPort,yu as resolveSshPrivateKeyPath,Cu as resolveSshProfile,bu as resolveSshPublicIp,Nn as resolveSshSettings,Su as resolveSshSudo,fu as resolveSshUser,Dn as scanHostKey,qa as scpUpload,Qn as serverPublicIpv4,gu as sshBootstrapMarkerPath,pr as sshExec,ae as sshExecOrThrow,it as sshHostKeyFingerprint,Za as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,Ym as verifyHetznerHostOptimization,Wm as verifyHetznerResize,Va as waitForCloudInit,wn as waitForSsh,K as wrapCloudInitUserData,nt as writeDriverState,eh as writeResizeCheckpoint};

package/dist/index.d.ts

@@ -44,8 +44,8 @@ export type { CreateCloudDriverOptions } from './drivers/factory';
 export type { DriverState, FirstBootBundle, FirstBootIdentity, FirstBootOs, ResolvedSshSettings, SshDriverOptions, SshDriverState, SshPreflightFacts, SshTransport, SshTransportOptions, } from './drivers';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';
 export type { DashboardAction, LocalDashboardServer, LocalDashboardServerOptions, } from './deploy/local-dashboard-server';
-export { createDnsProvider, detectDnsProvider, DnsProviderFactory, dnsProviders, PorkbunProvider, GoDaddyProvider, Route53Provider, CloudflareProvider, delegateZone, delegateZoneFromConfig, describeDelegation, isNameserverRegistrar, isZoneHost, policyTag, qualifyName, reconcileDeclaredRecords, resolveDeclaredRecords, sameNameservers, UnifiedDnsValidator, createPorkbunValidator, createGoDaddyValidator, createRoute53Validator, } from './dns';
-export type { CloudflareProviderOptions, CloudflareRule, CloudflareRulesetPhase, CloudflareZoneSetting, } from './dns/cloudflare';
+export { createDnsProvider, detectDnsProvider, DnsProviderFactory, dnsProviders, PorkbunProvider, GoDaddyProvider, Route53Provider, applyDeclaredZoneSettings, CloudflareProvider, delegateZone, delegateZoneFromConfig, describeDelegation, describeZoneSettings, isNameserverRegistrar, isZoneHost, policyTag, qualifyName, reconcileDeclaredRecords, resolveDeclaredRecords, sameNameservers, UnifiedDnsValidator, createPorkbunValidator, createGoDaddyValidator, createRoute53Validator, } from './dns';
+export type { CloudflareManagedHeaders, CloudflareProviderOptions, CloudflareRule, CloudflareRulesetPhase, CloudflareZoneSetting, } from './dns/cloudflare';
 export { CLOUDFLARE_MANAGED_RULE_PREFIX } from './dns/cloudflare';
 export * from './source';
 export * from './queue';