@stacksjs/ts-cloud 0.16.13 → 0.16.15

package/dist/{chunk-v99q99bs.js → chunk-y59rkb2n.js}

@@ -1,4 +1,4 @@
-import{u}from"./chunk-w41zkaey.js";var ot="/etc/rpx/sites.d",_h={start:3000,end:3999};function g(t){return t.slug?.trim()||"app"}function Ac(t){let r=t.lastIndexOf(":");if(r<0||r===t.length-1)return;let e=t.slice(r+1).trim();if(!/^\d+$/.test(e))return;let n=Number(e);return n>=1&&n<=65535?n:void 0}function Yn(t,r={}){let e=r.ignoreSlug?.trim(),n=new Map;for(let o of t){let c=g(o);if(e&&c===e)continue;for(let a of o.proxies??[]){let f=typeof a.from==="string"?[a.from]:a.from??[];for(let i of f){let d=Ac(i);if(d!==void 0&&!n.has(d))n.set(d,c)}}}return n}function Zn(t=ot){return[`for __tsc_fragment in ${t}/*.json; do`,'  [ -f "$__tsc_fragment" ] || continue',`  base64 < "$__tsc_fragment" | tr -d '\\n'`,"  printf '\\n'","done"].join(`
-`)}function ei(t){let r=[];for(let e of t.split(`
-`)){let n=e.trim();if(!n)continue;try{let o=JSON.parse(Buffer.from(n,"base64").toString("utf8"));if(o&&typeof o==="object"&&!Array.isArray(o))r.push(o)}catch{continue}}return r}function tp(t,r,e=_h){let n=[],o=[],c=new Set(r.keys());for(let[a,f]of Object.entries(t.sites??{})){if(!f||u(f)!=="server-app")continue;let i=typeof f.port==="number"?f.port:void 0,d=Math.max(i??e.start,e.start),p;for(let s=d;s<=e.end;s++)if(!c.has(s)){p=s;break}if(p===void 0){let s=i!==void 0?r.get(i):void 0;o.push(`No free port for site '${a}' in ${e.start}-${e.end}${i!==void 0?` (wanted ${i}${s?`, held by '${s}'`:""})`:""}. Widen the range or free a port on the box.`);continue}c.add(p),n.push({site:a,port:p,declared:i,moved:i!==void 0&&p!==i})}return{allocations:n,errors:o}}
-export{ot,_h,Ac,Yn,Zn,ei,tp};
+import{u}from"./chunk-97a7sxpe.js";var ot="/etc/rpx/sites.d",Mh={start:3000,end:3999};function g(t){return t.slug?.trim()||"app"}function Sc(t){let r=t.lastIndexOf(":");if(r<0||r===t.length-1)return;let e=t.slice(r+1).trim();if(!/^\d+$/.test(e))return;let n=Number(e);return n>=1&&n<=65535?n:void 0}function Zn(t,r={}){let e=r.ignoreSlug?.trim(),n=new Map;for(let o of t){let c=g(o);if(e&&c===e)continue;for(let a of o.proxies??[]){let f=typeof a.from==="string"?[a.from]:a.from??[];for(let i of f){let d=Sc(i);if(d!==void 0&&!n.has(d))n.set(d,c)}}}return n}function ei(t=ot){return[`for __tsc_fragment in ${t}/*.json; do`,'  [ -f "$__tsc_fragment" ] || continue',`  base64 < "$__tsc_fragment" | tr -d '\\n'`,"  printf '\\n'","done"].join(`
+`)}function ti(t){let r=[];for(let e of t.split(`
+`)){let n=e.trim();if(!n)continue;try{let o=JSON.parse(Buffer.from(n,"base64").toString("utf8"));if(o&&typeof o==="object"&&!Array.isArray(o))r.push(o)}catch{continue}}return r}function sp(t,r,e=Mh){let n=[],o=[],c=new Set(r.keys());for(let[a,f]of Object.entries(t.sites??{})){if(!f||u(f)!=="server-app")continue;let i=typeof f.port==="number"?f.port:void 0,d=Math.max(i??e.start,e.start),p;for(let s=d;s<=e.end;s++)if(!c.has(s)){p=s;break}if(p===void 0){let s=i!==void 0?r.get(i):void 0;o.push(`No free port for site '${a}' in ${e.start}-${e.end}${i!==void 0?` (wanted ${i}${s?`, held by '${s}'`:""})`:""}. Widen the range or free a port on the box.`);continue}c.add(p),n.push({site:a,port:p,declared:i,moved:i!==void 0&&p!==i})}return{allocations:n,errors:o}}
+export{ot,Mh,Sc,Zn,ei,ti,sp};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{Jr,Xr,Dl,Mi,Pl,Nl,kl,sa,Bl,xl,vm,_l,S,Ol,Fi,Pe,Ll,$l,NA,Ml,Tm,kA,BA,xA,wm,Rm,_A,OA,Dm,Pm,LA,Ui,Wt,oa,Yr,Zr,Jt,Je,It,Qi,Nm,en,Fl,Ul,aa,Gi,rn,qi,Ca}from"../chunk-fc2wc5h7.js";import{ba,nn,sn,Vi,ji,zi,Ki,Ea,va}from"../chunk-kksj2fy7.js";import{Ta}from"../chunk-fjqx22m1.js";import"../chunk-wp6pg5sx.js";import"../chunk-3nccgrzf.js";import"../chunk-30504159.js";import"../chunk-r5pjnw74.js";import"../chunk-1bxqrj7m.js";import"../chunk-6e967ybg.js";import"../chunk-ndm0r1vb.js";import{ru,Fa,Ae,Ua,yn,nu,Qa,lc,Ss,uc,Nt,zn,Cs}from"../chunk-d3vsmxhq.js";import"../chunk-aszeyg2w.js";import"../chunk-f5mqecfk.js";import"../chunk-t5e5phth.js";import"../chunk-4w8d2mf0.js";import{ot,_h,Ac,Yn,Zn,ei,tp}from"../chunk-v99q99bs.js";import{B,Ir,Sr,yc,vs,u,Oh,rp,np,gy,my}from"../chunk-w41zkaey.js";import"../chunk-wkbk6pdg.js";import"../chunk-dbzveymg.js";export{_h as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ua as IPV6_EXCLUDED_HOST_LABELS,lc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,tp as allocateSitePorts,LA as buildAndPushContainerImage,Ta as buildAndPushServerlessImage,Wt as buildFunctionEnv,Zn as buildHostSitePortsScript,Cs as buildManagementDashboardArtifact,It as buildServerTopology,Qi as buildServerlessTopology,Nm as buildTopology,aa as collectEgressMetrics,ru as collectServerDnsDomains,Pm as createContainerImageDependencies,wm as createExistingStaticFullStackDependencies,Tm as createStaticApiOriginDependencies,rn as dashboardActions,Ss as dashboardCredentialsFile,Ll as dashboardPageRoutes,Ea as deleteStaticSite,_A as deployExistingStaticFullStack,oa as deployServerlessApp,my as deployShipsFiles,Ml as deploySite,kA as deployStaticApiOrigin,ji as deployStaticSite,va as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,Fl as egressReportMetrics,S as ensureDashboardActor,zn as ensureManagementDashboard,OA as estimateExistingStaticFullStackMonthlyCost,xA as estimateStaticApiOriginMonthlyCost,Ul as fetchEgressReport,Rm as generateExistingStaticFullStackTemplate,ba as generateExternalDnsStaticSiteTemplate,Vi as generateStaticSiteTemplate,Oh as hasComputeConfigured,yc as hasProxyUpstream,Dm as hashContainerContext,yn as hostAcceptsIpv6,Ui as infraEnvFromOutputs,Ol as initializeDashboardControlPlane,Ki as invalidateCache,Ir as isPhpSite,sa as isValidHostname,Ae as normalizePublicIpv6,Yn as occupiedHostPorts,ei as parseHostSiteFragments,Ac as parseUpstreamPort,nu as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,Fa as removeStaleServerAddressRecords,Bl as renderAliasesValue,kl as renderEnvValue,xl as renderRedirectsValue,vm as renderSiteSnippet,Pl as renderSslValue,Nl as renderStringValue,qi as resolveDashboardAction,uc as resolveDashboardAuth,en as resolveDashboardData,$l as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,vs as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,NA as routesForDashboard,Je as runRemoteCommand,Gi as sanitizeCloudConfig,_l as setAttachToInCloudConfig,Jt as setMaintenance,Mi as setSitePropertyInCloudConfig,np as shipsARelease,gy as shipsToBucket,B as siteInstallBase,Ca as startLocalDashboardServer,Fi as synchronizeDashboardUsers,Pe as trackDashboardOperation,Dl as updateSiteInCloudConfig,zi as uploadStaticFiles,rp as validateDeploymentConfig,Qa as verifyAddressRecord,BA as verifyStaticApiOrigin};
+import{Jr,Xr,kl,Fi,Bl,_l,xl,oa,Ol,Ll,Dm,$l,S,Ml,Ui,Pe,Fl,Ul,xA,Ql,Pm,OA,LA,$A,Nm,km,MA,FA,Bm,_m,UA,Qi,Wt,aa,Yr,Zr,Jt,Je,It,Hi,xm,en,Hl,Gl,ca,qi,rn,Vi,Ea}from"../chunk-kx7zw3xn.js";import{ba,nn,sn,ji,zi,Ki,Wi,va,Ta}from"../chunk-9nxb5fyp.js";import{wa}from"../chunk-2rt6xbmv.js";import"../chunk-tznx5510.js";import"../chunk-g8tp1zj4.js";import"../chunk-sw1p9qge.js";import"../chunk-dns94gs7.js";import"../chunk-dxcwfj3h.js";import"../chunk-ht8rawp1.js";import"../chunk-21b8nage.js";import{ou,Ha,Ae,Ga,In,au,qa,gc,Cs,mc,Nt,Kn,Es}from"../chunk-bd75na8x.js";import"../chunk-fs78rxy1.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import{ot,Mh,Sc,Zn,ei,ti,sp}from"../chunk-y59rkb2n.js";import{B,Ir,Sr,Cc,Ts,u,Fh,op,ap,Ay,yy}from"../chunk-97a7sxpe.js";import"../chunk-8x24tv2g.js";import"../chunk-42ngwzvc.js";export{Mh as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ga as IPV6_EXCLUDED_HOST_LABELS,gc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,sp as allocateSitePorts,UA as buildAndPushContainerImage,wa as buildAndPushServerlessImage,Wt as buildFunctionEnv,ei as buildHostSitePortsScript,Es as buildManagementDashboardArtifact,It as buildServerTopology,Hi as buildServerlessTopology,xm as buildTopology,ca as collectEgressMetrics,ou as collectServerDnsDomains,_m as createContainerImageDependencies,Nm as createExistingStaticFullStackDependencies,Pm as createStaticApiOriginDependencies,rn as dashboardActions,Cs as dashboardCredentialsFile,Fl as dashboardPageRoutes,va as deleteStaticSite,MA as deployExistingStaticFullStack,aa as deployServerlessApp,yy as deployShipsFiles,Ql as deploySite,OA as deployStaticApiOrigin,zi as deployStaticSite,Ta as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,Hl as egressReportMetrics,S as ensureDashboardActor,Kn as ensureManagementDashboard,FA as estimateExistingStaticFullStackMonthlyCost,$A as estimateStaticApiOriginMonthlyCost,Gl as fetchEgressReport,km as generateExistingStaticFullStackTemplate,ba as generateExternalDnsStaticSiteTemplate,ji as generateStaticSiteTemplate,Fh as hasComputeConfigured,Cc as hasProxyUpstream,Bm as hashContainerContext,In as hostAcceptsIpv6,Qi as infraEnvFromOutputs,Ml as initializeDashboardControlPlane,Wi as invalidateCache,Ir as isPhpSite,oa as isValidHostname,Ae as normalizePublicIpv6,Zn as occupiedHostPorts,ti as parseHostSiteFragments,Sc as parseUpstreamPort,au as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,Ha as removeStaleServerAddressRecords,Ol as renderAliasesValue,xl as renderEnvValue,Ll as renderRedirectsValue,Dm as renderSiteSnippet,Bl as renderSslValue,_l as renderStringValue,Vi as resolveDashboardAction,mc as resolveDashboardAuth,en as resolveDashboardData,Ul as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,Ts as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,xA as routesForDashboard,Je as runRemoteCommand,qi as sanitizeCloudConfig,$l as setAttachToInCloudConfig,Jt as setMaintenance,Fi as setSitePropertyInCloudConfig,ap as shipsARelease,Ay as shipsToBucket,B as siteInstallBase,Ea as startLocalDashboardServer,Ui as synchronizeDashboardUsers,Pe as trackDashboardOperation,kl as updateSiteInCloudConfig,Ki as uploadStaticFiles,op as validateDeploymentConfig,qa as verifyAddressRecord,LA as verifyStaticApiOrigin};

package/dist/dns/cloudflare.d.ts

@@ -286,6 +286,37 @@ export declare class CloudflareProvider implements DnsProvider {
         message?: string;
     }>;
 }
+/**
+ * A rule expression with its host clause taken out. Two rules with the same
+ * shape (and the same action) do the same thing, each to its own hosts.
+ */
+export declare function expressionShape(expression: string): string | null;
+/** The same expression scoped to `hosts` instead. */
+export declare function scopeExpression(expression: string, hosts: readonly string[]): string;
+/**
+ * The phase's rule list after one project writes its managed rules.
+ *
+ * A zone is routinely shared (stacksjs.com carries a dozen tenants' sites,
+ * each deploying on its own), and a phase holds only so many rules: 10 cache
+ * rules on Cloudflare's Free plan. Written one set per tenant, the fourth
+ * tenant's deploy failed with "exceeded the maximum number of rules in the
+ * phase http_request_cache_settings: 12 out of 10" and its site went without
+ * cache rules at all.
+ *
+ * So rules that behave identically - same action, parameters and expression,
+ * differing only in their hosts - are stored once with the union of their
+ * hosts. That is exact, not an approximation: the phase applies every
+ * matching rule, and a rule's effect on a host does not depend on which other
+ * hosts share it. Tenants on default settings now cost nothing extra.
+ *
+ * Ownership is therefore per host, not per rule. Writing this project's rules
+ * first takes its hosts out of every managed rule (dropping a rule left with
+ * none) and only then adds them back, merging where it can. The one cost: a
+ * host a project stops declaring lingers in a shared rule, which is harmless
+ * because nothing routes it. Rules without the managed prefix are never
+ * touched, and an unscoped managed rule is left alone by a scoped write.
+ */
+export declare function mergeManagedRules(existing: CloudflareRule[], incoming: CloudflareRule[]): CloudflareRule[];
 /**
  * The hosts a rule expression is scoped to, in the two shapes `hostCondition`
  * writes: `http.host eq "a"` and `http.host in {"a" "b"}`.

package/dist/dns/index.js

@@ -1 +1 @@
-import{tt,se,xe,fe,Tt,hn,rs,ns,nr,ir,fn,sr,is,ss,os,as,z,cs,ds,ls,us,oe,ps,gs,ms,T,$a,An,Ma}from"../chunk-6e967ybg.js";import"../chunk-ndm0r1vb.js";import"../chunk-4w8d2mf0.js";export{fe as CloudflareProvider,An as DnsProviderFactory,xe as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,se as PorkbunProvider,z as Route53Provider,oe as UnifiedDnsValidator,os as applyDeclaredZoneSettings,ls as applyZoneMigration,T as createDnsProvider,gs as createGoDaddyValidator,ps as createPorkbunValidator,ms as createRoute53Validator,sr as delegateZone,is as delegateZoneFromConfig,ss as describeDelegation,as as describeZoneSettings,$a as detectDnsProvider,Ma as dnsProviders,cs as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,ds as planZoneMigration,Tt as policyTag,hn as qualifyName,ns as reconcileDeclaredRecords,rs as resolveDeclaredRecords,fn as sameNameservers,us as verifyZoneParity};
+import{tt,se,_e,fe,Tt,fn,ns,is,nr,ir,An,sr,ss,os,as,cs,z,ds,ls,us,ps,oe,gs,ms,hs,T,Ua,yn,Qa}from"../chunk-ht8rawp1.js";import"../chunk-21b8nage.js";import"../chunk-8a02v9gs.js";export{fe as CloudflareProvider,yn as DnsProviderFactory,_e as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,se as PorkbunProvider,z as Route53Provider,oe as UnifiedDnsValidator,as as applyDeclaredZoneSettings,us as applyZoneMigration,T as createDnsProvider,ms as createGoDaddyValidator,gs as createPorkbunValidator,hs as createRoute53Validator,sr as delegateZone,ss as delegateZoneFromConfig,os as describeDelegation,cs as describeZoneSettings,Ua as detectDnsProvider,Qa as dnsProviders,ds as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,ls as planZoneMigration,Tt as policyTag,fn as qualifyName,is as reconcileDeclaredRecords,ns as resolveDeclaredRecords,An as sameNameservers,ps as verifyZoneParity};

package/dist/drivers/index.js

@@ -1 +1 @@
-import{In,wt,ar,Rt,Sn,Cn,bn,En,au,Ha,K,lr,jm,vn,Ga,ye,Ie,_e,N,ur,Tn,pr,ce,qa,wn,Va,Rn,ja,gr,Ka,Oe,W,Wa,rt,Le,$e,nt,Se,As,Ja,cu,du,Xa,lu,it,Dn,Ya,uu,pu,Za,mr,Ce,ec,gu,mu,ys,Pn,st,hu,fu,Au,yu,Iu,Su,Cu,bu,Eu,Nn,kn,Bn,xn,_n,On,Ln,vu,Tu,hr,k,Is,wu,Ru,Du,tc,Pu,Nu,zm,rc,Km,Wm,ku,Bu,Jm,Xm,Ym,nc,xu,Zm,eh,th,$n,Mn,Un,Qn,ic,sc,oc,ac,rh,Hn,Gn,qn,Vn,cc,dc,jn,bs,pc,Kn,gc,nh,ih,sh,oh}from"../chunk-d3vsmxhq.js";import"../chunk-aszeyg2w.js";import"../chunk-f5mqecfk.js";import"../chunk-t5e5phth.js";import"../chunk-4w8d2mf0.js";import"../chunk-w41zkaey.js";import"../chunk-dbzveymg.js";export{ac as AwsBoxProvisioner,ur as AwsDriver,Du as BOOT_PARTITION_LABEL,Is as CloudDriverFactory,Cn as DEFAULT_RPX_CERTS_DIR,Ru as FIRST_BOOT_SCRIPT_PATH,oc as HetznerBoxProvisioner,gr as HetznerClient,Se as HetznerDriver,Wa as LEGACY_DRIVER_STATE_DIR,As as LocalBoxDriver,ih as MANAGED_CACHE_POLICY_DISABLED,nh as MANAGED_CACHE_POLICY_OPTIMIZED,sh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,mu as RASPBERRY_PI_DEFAULT_SWAP_GB,ja as REMOTE_SCRIPT_RUNNER,vn as RPX_DIR,Ga as RPX_LAUNCHER_PATH,ye as RPX_SERVICE_NAME,ec as SSH_BOOTSTRAP_MARKER_DIR,Ce as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,Ln as SSH_DEPLOY_STORAGE_PATH,cu as SSH_INSECURE_HOST_KEY_OPTS,du as SSH_KEEPALIVE_OPTS,kn as SSH_PREFLIGHT_SCRIPT,vu as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,ic as UBUNTU_2404_AMI_PARAM,th as acquireResizeLock,Jm as applyHetznerHostOptimization,ys as assertArchSupported,Tu as assertSshComputeConfig,cc as buildAwsArtifactFetch,sc as buildBoxUserData,oh as buildCloudFrontOriginConfig,tc as buildCloudInitFirstBoot,Bu as buildHetznerHostOptimizationScript,jn as buildHostCleanupScript,dc as buildLocalArtifactFetch,K as buildRpxConfig,_e as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,Ie as buildRpxProvisionScript,lu as buildScpArgsFor,Gn as buildSiteDeployScript,Tn as buildSshArgs,Xa as buildSshArgsFor,Pn as buildSshBootstrapScript,qn as buildStaticSiteDeployScript,wu as cloudDrivers,Xm as collectHetznerHostOptimizationReport,rc as collectHetznerResizeManifest,rh as createBoxProvisioner,k as createCloudDriver,pc as deployAllComputeSites,bs as deploySiteRelease,Ha as deriveRouteId,In as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Mn as ensureFirewall,Un as ensureServer,$n as ensureSshKey,xn as evaluatePreflight,zm as executeHetznerServerResize,pu as findKnownHostKey,On as formatPreflightFindings,wt as formatSshFailure,En as gatewayHostnames,N as generateUbuntuAppCloudInit,bn as hasAutoWwwVariant,Ja as isBoxMode,Nu as isHetznerCapacityError,Sn as isLocalDatabase,uu as knownHostsLine,Ya as knownHostsToken,au as normalizeRoutePath,Oe as normalizeSshPublicKey,Bn as parsePreflightFacts,Pu as planHetznerServerResize,_n as preflightFailed,Km as prepareHetznerResize,$e as readDriverState,Zm as readResizeCheckpoint,Vn as releaseTarballTmpPath,Kn as reloadRpxGateway,Rn as remoteScriptRunner,jm as renderRpxLauncher,gc as renewRpxCertificates,nc as resizeCheckpointPath,xu as resizeLockPath,Hn as resolveExecStart,Ka as resolveHetznerApiToken,ku as resolveHetznerHostOptimizationPlan,Iu as resolveSshHostKeyPolicy,hu as resolveSshHosts,Eu as resolveSshLan,Au as resolveSshPort,yu as resolveSshPrivateKeyPath,Cu as resolveSshProfile,bu as resolveSshPublicIp,Nn as resolveSshSettings,Su as resolveSshSudo,fu as resolveSshUser,Dn as scanHostKey,qa as scpUpload,Qn as serverPublicIpv4,gu as sshBootstrapMarkerPath,pr as sshExec,ce as sshExecOrThrow,it as sshHostKeyFingerprint,Za as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,Ym as verifyHetznerHostOptimization,Wm as verifyHetznerResize,Va as waitForCloudInit,wn as waitForSsh,W as wrapCloudInitUserData,nt as writeDriverState,eh as writeResizeCheckpoint};
+import{Sn,wt,ar,Rt,Cn,En,bn,vn,uu,Va,K,lr,Jm,Tn,ja,ye,Ie,xe,N,ur,wn,pr,ce,za,Rn,Ka,Dn,Wa,gr,Xa,Oe,W,Ya,rt,Le,$e,nt,Se,ys,Za,pu,gu,ec,mu,it,Pn,tc,hu,fu,rc,mr,Ce,nc,Au,yu,Is,Nn,st,Iu,Su,Cu,Eu,bu,vu,Tu,wu,Ru,kn,Bn,_n,xn,On,Ln,$n,Du,Pu,hr,k,Ss,Nu,ku,Bu,ic,_u,xu,Xm,sc,Ym,Zm,Ou,Lu,eh,th,rh,oc,$u,nh,ih,sh,Mn,Un,Qn,Hn,ac,cc,dc,lc,oh,Gn,qn,Vn,jn,uc,pc,zn,bs,hc,Wn,fc,ah,ch,dh,lh}from"../chunk-bd75na8x.js";import"../chunk-fs78rxy1.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import"../chunk-97a7sxpe.js";import"../chunk-42ngwzvc.js";export{lc as AwsBoxProvisioner,ur as AwsDriver,Bu as BOOT_PARTITION_LABEL,Ss as CloudDriverFactory,En as DEFAULT_RPX_CERTS_DIR,ku as FIRST_BOOT_SCRIPT_PATH,dc as HetznerBoxProvisioner,gr as HetznerClient,Se as HetznerDriver,Ya as LEGACY_DRIVER_STATE_DIR,ys as LocalBoxDriver,ch as MANAGED_CACHE_POLICY_DISABLED,ah as MANAGED_CACHE_POLICY_OPTIMIZED,dh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,yu as RASPBERRY_PI_DEFAULT_SWAP_GB,Wa as REMOTE_SCRIPT_RUNNER,Tn as RPX_DIR,ja as RPX_LAUNCHER_PATH,ye as RPX_SERVICE_NAME,nc as SSH_BOOTSTRAP_MARKER_DIR,Ce as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,$n as SSH_DEPLOY_STORAGE_PATH,pu as SSH_INSECURE_HOST_KEY_OPTS,gu as SSH_KEEPALIVE_OPTS,Bn as SSH_PREFLIGHT_SCRIPT,Du as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,ac as UBUNTU_2404_AMI_PARAM,sh as acquireResizeLock,eh as applyHetznerHostOptimization,Is as assertArchSupported,Pu as assertSshComputeConfig,uc as buildAwsArtifactFetch,cc as buildBoxUserData,lh as buildCloudFrontOriginConfig,ic as buildCloudInitFirstBoot,Lu as buildHetznerHostOptimizationScript,zn as buildHostCleanupScript,pc as buildLocalArtifactFetch,K as buildRpxConfig,xe as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,Ie as buildRpxProvisionScript,mu as buildScpArgsFor,qn as buildSiteDeployScript,wn as buildSshArgs,ec as buildSshArgsFor,Nn as buildSshBootstrapScript,Vn as buildStaticSiteDeployScript,Nu as cloudDrivers,th as collectHetznerHostOptimizationReport,sc as collectHetznerResizeManifest,oh as createBoxProvisioner,k as createCloudDriver,hc as deployAllComputeSites,bs as deploySiteRelease,Va as deriveRouteId,Sn as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Un as ensureFirewall,Qn as ensureServer,Mn as ensureSshKey,xn as evaluatePreflight,Xm as executeHetznerServerResize,fu as findKnownHostKey,Ln as formatPreflightFindings,wt as formatSshFailure,vn as gatewayHostnames,N as generateUbuntuAppCloudInit,bn as hasAutoWwwVariant,Za as isBoxMode,xu as isHetznerCapacityError,Cn as isLocalDatabase,hu as knownHostsLine,tc as knownHostsToken,uu as normalizeRoutePath,Oe as normalizeSshPublicKey,_n as parsePreflightFacts,_u as planHetznerServerResize,On as preflightFailed,Ym as prepareHetznerResize,$e as readDriverState,nh as readResizeCheckpoint,jn as releaseTarballTmpPath,Wn as reloadRpxGateway,Dn as remoteScriptRunner,Jm as renderRpxLauncher,fc as renewRpxCertificates,oc as resizeCheckpointPath,$u as resizeLockPath,Gn as resolveExecStart,Xa as resolveHetznerApiToken,Ou as resolveHetznerHostOptimizationPlan,bu as resolveSshHostKeyPolicy,Iu as resolveSshHosts,Ru as resolveSshLan,Cu as resolveSshPort,Eu as resolveSshPrivateKeyPath,Tu as resolveSshProfile,wu as resolveSshPublicIp,kn as resolveSshSettings,vu as resolveSshSudo,Su as resolveSshUser,Pn as scanHostKey,za as scpUpload,Hn as serverPublicIpv4,Au as sshBootstrapMarkerPath,pr as sshExec,ce as sshExecOrThrow,it as sshHostKeyFingerprint,rc as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,rh as verifyHetznerHostOptimization,Zm as verifyHetznerResize,Ka as waitForCloudInit,Rn as waitForSsh,W as wrapCloudInitUserData,nt as writeDriverState,ih as writeResizeCheckpoint};

package/dist/drivers/shared/deploy-script.d.ts

@@ -10,7 +10,7 @@
  * release (no window where the code is half-replaced). Old releases are kept for
  * instant rollback. See {@link import('./releases')}.
  */
-import type { SharedPathEntry } from '@ts-cloud/core';
+import type { SharedPathEntry, SiteLivenessConfig } from '@ts-cloud/core';
 /**
  * Translate a `start` command into an absolute systemd ExecStart.
  *
@@ -38,21 +38,6 @@ import type { SharedPathEntry } from '@ts-cloud/core';
  * rather than emitting a unit that fails to start.
  */
 export declare function resolveExecStart(start: string, runtime: 'bun' | 'node' | 'deno', workingDirectory?: string): string;
-/**
- * Shell that installs a recurring liveness check for one ported service.
- *
- * Three files: a check script, a oneshot service that runs it, and a timer.
- * The script resolves the unit to probe at run time rather than baking in a
- * release id, so it keeps working after the next deploy replaces the instance.
- *
- * `curl` without `-f`: any HTTP response means the process is answering, and a
- * 404 on `/` is a routing opinion, not a wedged event loop. Only a connection
- * failure or a timeout counts against it.
- *
- * A restart needs N consecutive failures, counted in a file under /run, so a
- * single slow moment cannot bounce a healthy service; the counter resets on the
- * first good response. flock keeps two ticks from overlapping.
- */
 /**
  * Stop the implicit per-template slice from silently capping the service.
  *
@@ -138,15 +123,65 @@ export declare function buildAutoMemoryHigh(unitFile: string): string[];
  */
 export declare function buildCommitmentReport(): string[];
 export declare function buildSliceReconcile(instance: string): string[];
+/**
+ * Liveness probe settings for a ported site - the same shape as
+ * `SiteConfig.liveness`. See {@link LIVENESS_DEFAULTS} for unset fields.
+ */
+export type LivenessOptions = SiteLivenessConfig;
+export declare const LIVENESS_DEFAULTS: {
+    readonly path: '/';
+    readonly intervalSeconds: 60;
+    readonly failuresBeforeRestart: 3;
+    readonly timeoutSeconds: 10;
+    readonly startupGraceSeconds: 600;
+    readonly maxBackoffSeconds: 3600;
+    /** The wait before the second consecutive restart; it doubles from there. */
+    readonly backoffBaseSeconds: 300;
+};
+/**
+ * Shell that installs a recurring liveness check for one ported service.
+ *
+ * Three files: a check script, a oneshot service that runs it, and a timer.
+ * The script resolves the unit to probe at run time rather than baking in a
+ * release id, so it keeps working after the next deploy replaces the instance.
+ *
+ * `curl` without `-f`: any HTTP response means the process is answering, and a
+ * 404 on `/` is a routing opinion, not a wedged event loop. Only a refused
+ * connection or no response within `timeoutSeconds` counts against it. A
+ * timeout has to count - a wedged process still has its port bound and the
+ * kernel still accepts into its backlog, so "connects but never answers" is
+ * exactly the failure this exists for - which is why the budget is generous
+ * rather than why timeouts are forgiven.
+ *
+ * A restart needs N consecutive failures, counted in a file under /run, so a
+ * single slow moment cannot bounce a healthy service; the counter resets on the
+ * first good response. flock keeps two ticks from overlapping.
+ *
+ * **Startup grace.** A check against a unit younger than `startupGraceSeconds`
+ * is not counted. Without it the probe turned a slow boot into an outage loop:
+ * a release whose image warm-up kept its main thread busy for minutes after
+ * binding was restarted three minutes into each boot, three times running.
+ * Every restart threw the warm-up away and began it again, so visitors saw
+ * nine minutes of 502s from a release that would have been healthy in five.
+ * The age is the unit's own `ActiveEnterTimestampMonotonic` against
+ * `/proc/uptime`, which a restart resets, with the main PID's elapsed time as
+ * the fallback.
+ *
+ * **Back-off.** Restarts the probe itself issued are remembered with the time
+ * of the last one. The second in a row waits at least five minutes after the
+ * first and each later one doubles, capped at `maxBackoffSeconds`, so a
+ * release that can never come up is restarted a handful of times and then
+ * about hourly, not every few minutes forever. The streak is forgotten once
+ * the service answers with no probe restart in the last `maxBackoffSeconds`,
+ * and a deploy starts it afresh. Every held-off restart says so in the
+ * journal under the `<unit>-liveness` tag.
+ */
 export declare function buildLivenessUnits(options: {
     unitBase: string;
     /** systemd unit to restart. A `<base>@*.service` glob resolves at run time. */
     unitPattern: string;
     port: number;
-    path?: string;
-    intervalSeconds?: number;
-    failuresBeforeRestart?: number;
-}): string[];
+} & LivenessOptions): string[];
 export interface BuildSiteDeployScriptOptions {
     siteName: string;
     slug: string;
@@ -218,18 +253,16 @@ export interface BuildSiteDeployScriptOptions {
      * The probe is an HTTP request rather than a listener check for that exact
      * reason — `ss` would have called the wedged process healthy.
      *
+     * A unit younger than `startupGraceSeconds` is never restarted, and
+     * consecutive restarts back off, so a slow boot cannot become a restart
+     * loop. See {@link buildLivenessUnits}.
+     *
      * Set `false` to opt out (a service that legitimately answers nothing on its
      * port, or one where a restart is more dangerous than an outage).
-     * @default enabled, `/` every 60s, restart after 3 consecutive failures
+     * @default enabled, `/` every 60s with a 10s timeout, restart after 3
+     * consecutive failures once the unit is 10 minutes old
      */
-    liveness?: false | {
-        /** Path to request. @default '/' */
-        path?: string;
-        /** Seconds between checks. @default 60 */
-        intervalSeconds?: number;
-        /** Consecutive failures before a restart. @default 3 */
-        failuresBeforeRestart?: number;
-    };
+    liveness?: false | LivenessOptions;
     /**
      * systemd `MemoryHigh` for the app unit. See {@link SiteConfig.memoryHigh}.
      * @default '2G'