@stacksjs/ts-cloud 0.16.14 → 0.16.15

package/dist/{chunk-kt6qnc6f.js → chunk-y59rkb2n.js}

@@ -1,4 +1,4 @@
-import{u}from"./chunk-0hf0rdze.js";var ot="/etc/rpx/sites.d",Mh={start:3000,end:3999};function g(t){return t.slug?.trim()||"app"}function Sc(t){let r=t.lastIndexOf(":");if(r<0||r===t.length-1)return;let e=t.slice(r+1).trim();if(!/^\d+$/.test(e))return;let n=Number(e);return n>=1&&n<=65535?n:void 0}function Zn(t,r={}){let e=r.ignoreSlug?.trim(),n=new Map;for(let o of t){let c=g(o);if(e&&c===e)continue;for(let a of o.proxies??[]){let f=typeof a.from==="string"?[a.from]:a.from??[];for(let i of f){let d=Sc(i);if(d!==void 0&&!n.has(d))n.set(d,c)}}}return n}function ei(t=ot){return[`for __tsc_fragment in ${t}/*.json; do`,'  [ -f "$__tsc_fragment" ] || continue',`  base64 < "$__tsc_fragment" | tr -d '\\n'`,"  printf '\\n'","done"].join(`
+import{u}from"./chunk-97a7sxpe.js";var ot="/etc/rpx/sites.d",Mh={start:3000,end:3999};function g(t){return t.slug?.trim()||"app"}function Sc(t){let r=t.lastIndexOf(":");if(r<0||r===t.length-1)return;let e=t.slice(r+1).trim();if(!/^\d+$/.test(e))return;let n=Number(e);return n>=1&&n<=65535?n:void 0}function Zn(t,r={}){let e=r.ignoreSlug?.trim(),n=new Map;for(let o of t){let c=g(o);if(e&&c===e)continue;for(let a of o.proxies??[]){let f=typeof a.from==="string"?[a.from]:a.from??[];for(let i of f){let d=Sc(i);if(d!==void 0&&!n.has(d))n.set(d,c)}}}return n}function ei(t=ot){return[`for __tsc_fragment in ${t}/*.json; do`,'  [ -f "$__tsc_fragment" ] || continue',`  base64 < "$__tsc_fragment" | tr -d '\\n'`,"  printf '\\n'","done"].join(`
 `)}function ti(t){let r=[];for(let e of t.split(`
 `)){let n=e.trim();if(!n)continue;try{let o=JSON.parse(Buffer.from(n,"base64").toString("utf8"));if(o&&typeof o==="object"&&!Array.isArray(o))r.push(o)}catch{continue}}return r}function sp(t,r,e=Mh){let n=[],o=[],c=new Set(r.keys());for(let[a,f]of Object.entries(t.sites??{})){if(!f||u(f)!=="server-app")continue;let i=typeof f.port==="number"?f.port:void 0,d=Math.max(i??e.start,e.start),p;for(let s=d;s<=e.end;s++)if(!c.has(s)){p=s;break}if(p===void 0){let s=i!==void 0?r.get(i):void 0;o.push(`No free port for site '${a}' in ${e.start}-${e.end}${i!==void 0?` (wanted ${i}${s?`, held by '${s}'`:""})`:""}. Widen the range or free a port on the box.`);continue}c.add(p),n.push({site:a,port:p,declared:i,moved:i!==void 0&&p!==i})}return{allocations:n,errors:o}}
 export{ot,Mh,Sc,Zn,ei,ti,sp};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{Jr,Xr,kl,Fi,Bl,xl,_l,oa,Ol,Ll,Dm,$l,S,Ml,Ui,Pe,Fl,Ul,_A,Ql,Pm,OA,LA,$A,Nm,km,MA,FA,Bm,xm,UA,Qi,Wt,aa,Yr,Zr,Jt,Je,It,Hi,_m,en,Hl,Gl,ca,qi,rn,Vi,ba}from"../chunk-ffjc6gev.js";import{Ea,nn,sn,ji,zi,Ki,Wi,va,Ta}from"../chunk-nw5yqgtn.js";import{wa}from"../chunk-tgzp1h6j.js";import"../chunk-55cmjg49.js";import"../chunk-g8tp1zj4.js";import"../chunk-sw1p9qge.js";import"../chunk-dns94gs7.js";import"../chunk-dxcwfj3h.js";import"../chunk-s40cx3fh.js";import"../chunk-21b8nage.js";import{ou,Ha,Ae,Ga,In,au,qa,gc,Cs,mc,Nt,Kn,bs}from"../chunk-bpvpq6w6.js";import"../chunk-aesvajfc.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import{ot,Mh,Sc,Zn,ei,ti,sp}from"../chunk-kt6qnc6f.js";import{B,Ir,Sr,Cc,Ts,u,Fh,op,ap,Ay,yy}from"../chunk-0hf0rdze.js";import"../chunk-7pk6cctr.js";import"../chunk-d72ddm5x.js";export{Mh as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ga as IPV6_EXCLUDED_HOST_LABELS,gc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,sp as allocateSitePorts,UA as buildAndPushContainerImage,wa as buildAndPushServerlessImage,Wt as buildFunctionEnv,ei as buildHostSitePortsScript,bs as buildManagementDashboardArtifact,It as buildServerTopology,Hi as buildServerlessTopology,_m as buildTopology,ca as collectEgressMetrics,ou as collectServerDnsDomains,xm as createContainerImageDependencies,Nm as createExistingStaticFullStackDependencies,Pm as createStaticApiOriginDependencies,rn as dashboardActions,Cs as dashboardCredentialsFile,Fl as dashboardPageRoutes,va as deleteStaticSite,MA as deployExistingStaticFullStack,aa as deployServerlessApp,yy as deployShipsFiles,Ql as deploySite,OA as deployStaticApiOrigin,zi as deployStaticSite,Ta as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,Hl as egressReportMetrics,S as ensureDashboardActor,Kn as ensureManagementDashboard,FA as estimateExistingStaticFullStackMonthlyCost,$A as estimateStaticApiOriginMonthlyCost,Gl as fetchEgressReport,km as generateExistingStaticFullStackTemplate,Ea as generateExternalDnsStaticSiteTemplate,ji as generateStaticSiteTemplate,Fh as hasComputeConfigured,Cc as hasProxyUpstream,Bm as hashContainerContext,In as hostAcceptsIpv6,Qi as infraEnvFromOutputs,Ml as initializeDashboardControlPlane,Wi as invalidateCache,Ir as isPhpSite,oa as isValidHostname,Ae as normalizePublicIpv6,Zn as occupiedHostPorts,ti as parseHostSiteFragments,Sc as parseUpstreamPort,au as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,Ha as removeStaleServerAddressRecords,Ol as renderAliasesValue,_l as renderEnvValue,Ll as renderRedirectsValue,Dm as renderSiteSnippet,Bl as renderSslValue,xl as renderStringValue,Vi as resolveDashboardAction,mc as resolveDashboardAuth,en as resolveDashboardData,Ul as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,Ts as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,_A as routesForDashboard,Je as runRemoteCommand,qi as sanitizeCloudConfig,$l as setAttachToInCloudConfig,Jt as setMaintenance,Fi as setSitePropertyInCloudConfig,ap as shipsARelease,Ay as shipsToBucket,B as siteInstallBase,ba as startLocalDashboardServer,Ui as synchronizeDashboardUsers,Pe as trackDashboardOperation,kl as updateSiteInCloudConfig,Ki as uploadStaticFiles,op as validateDeploymentConfig,qa as verifyAddressRecord,LA as verifyStaticApiOrigin};
+import{Jr,Xr,kl,Fi,Bl,_l,xl,oa,Ol,Ll,Dm,$l,S,Ml,Ui,Pe,Fl,Ul,xA,Ql,Pm,OA,LA,$A,Nm,km,MA,FA,Bm,_m,UA,Qi,Wt,aa,Yr,Zr,Jt,Je,It,Hi,xm,en,Hl,Gl,ca,qi,rn,Vi,Ea}from"../chunk-kx7zw3xn.js";import{ba,nn,sn,ji,zi,Ki,Wi,va,Ta}from"../chunk-9nxb5fyp.js";import{wa}from"../chunk-2rt6xbmv.js";import"../chunk-tznx5510.js";import"../chunk-g8tp1zj4.js";import"../chunk-sw1p9qge.js";import"../chunk-dns94gs7.js";import"../chunk-dxcwfj3h.js";import"../chunk-ht8rawp1.js";import"../chunk-21b8nage.js";import{ou,Ha,Ae,Ga,In,au,qa,gc,Cs,mc,Nt,Kn,Es}from"../chunk-bd75na8x.js";import"../chunk-fs78rxy1.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import{ot,Mh,Sc,Zn,ei,ti,sp}from"../chunk-y59rkb2n.js";import{B,Ir,Sr,Cc,Ts,u,Fh,op,ap,Ay,yy}from"../chunk-97a7sxpe.js";import"../chunk-8x24tv2g.js";import"../chunk-42ngwzvc.js";export{Mh as DEFAULT_SITE_PORT_RANGE,ot as HOST_SITES_DIR,Ga as IPV6_EXCLUDED_HOST_LABELS,gc as MANAGEMENT_DASHBOARD_SITE,Jr as addSiteToCloudConfig,sp as allocateSitePorts,UA as buildAndPushContainerImage,wa as buildAndPushServerlessImage,Wt as buildFunctionEnv,ei as buildHostSitePortsScript,Es as buildManagementDashboardArtifact,It as buildServerTopology,Hi as buildServerlessTopology,xm as buildTopology,ca as collectEgressMetrics,ou as collectServerDnsDomains,_m as createContainerImageDependencies,Nm as createExistingStaticFullStackDependencies,Pm as createStaticApiOriginDependencies,rn as dashboardActions,Cs as dashboardCredentialsFile,Fl as dashboardPageRoutes,va as deleteStaticSite,MA as deployExistingStaticFullStack,aa as deployServerlessApp,yy as deployShipsFiles,Ql as deploySite,OA as deployStaticApiOrigin,zi as deployStaticSite,Ta as deployStaticSiteFull,nn as deployStaticSiteWithExternalDns,sn as deployStaticSiteWithExternalDnsFull,Hl as egressReportMetrics,S as ensureDashboardActor,Kn as ensureManagementDashboard,FA as estimateExistingStaticFullStackMonthlyCost,$A as estimateStaticApiOriginMonthlyCost,Gl as fetchEgressReport,km as generateExistingStaticFullStackTemplate,ba as generateExternalDnsStaticSiteTemplate,ji as generateStaticSiteTemplate,Fh as hasComputeConfigured,Cc as hasProxyUpstream,Bm as hashContainerContext,In as hostAcceptsIpv6,Qi as infraEnvFromOutputs,Ml as initializeDashboardControlPlane,Wi as invalidateCache,Ir as isPhpSite,oa as isValidHostname,Ae as normalizePublicIpv6,Zn as occupiedHostPorts,ti as parseHostSiteFragments,Sc as parseUpstreamPort,au as reconcileAddressRecords,Yr as redeployServerlessApp,Xr as removeSiteFromCloudConfig,Ha as removeStaleServerAddressRecords,Ol as renderAliasesValue,xl as renderEnvValue,Ll as renderRedirectsValue,Dm as renderSiteSnippet,Bl as renderSslValue,_l as renderStringValue,Vi as resolveDashboardAction,mc as resolveDashboardAuth,en as resolveDashboardData,Ul as resolveLegacyDashboardRoute,Sr as resolveProxyUpstreams,Ts as resolveSiteDeployTarget,u as resolveSiteKind,Nt as resolveUiSource,Zr as rollbackServerlessApp,xA as routesForDashboard,Je as runRemoteCommand,qi as sanitizeCloudConfig,$l as setAttachToInCloudConfig,Jt as setMaintenance,Fi as setSitePropertyInCloudConfig,ap as shipsARelease,Ay as shipsToBucket,B as siteInstallBase,Ea as startLocalDashboardServer,Ui as synchronizeDashboardUsers,Pe as trackDashboardOperation,kl as updateSiteInCloudConfig,Ki as uploadStaticFiles,op as validateDeploymentConfig,qa as verifyAddressRecord,LA as verifyStaticApiOrigin};

package/dist/dns/index.js

@@ -1 +1 @@
-import{tt,se,xe,fe,Tt,fn,ns,is,nr,ir,An,sr,ss,os,as,cs,z,ds,ls,us,ps,oe,gs,ms,hs,T,Ua,yn,Qa}from"../chunk-s40cx3fh.js";import"../chunk-21b8nage.js";import"../chunk-8a02v9gs.js";export{fe as CloudflareProvider,yn as DnsProviderFactory,xe as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,se as PorkbunProvider,z as Route53Provider,oe as UnifiedDnsValidator,as as applyDeclaredZoneSettings,us as applyZoneMigration,T as createDnsProvider,ms as createGoDaddyValidator,gs as createPorkbunValidator,hs as createRoute53Validator,sr as delegateZone,ss as delegateZoneFromConfig,os as describeDelegation,cs as describeZoneSettings,Ua as detectDnsProvider,Qa as dnsProviders,ds as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,ls as planZoneMigration,Tt as policyTag,fn as qualifyName,is as reconcileDeclaredRecords,ns as resolveDeclaredRecords,An as sameNameservers,ps as verifyZoneParity};
+import{tt,se,_e,fe,Tt,fn,ns,is,nr,ir,An,sr,ss,os,as,cs,z,ds,ls,us,ps,oe,gs,ms,hs,T,Ua,yn,Qa}from"../chunk-ht8rawp1.js";import"../chunk-21b8nage.js";import"../chunk-8a02v9gs.js";export{fe as CloudflareProvider,yn as DnsProviderFactory,_e as GoDaddyProvider,tt as PROXIABLE_RECORD_TYPES,se as PorkbunProvider,z as Route53Provider,oe as UnifiedDnsValidator,as as applyDeclaredZoneSettings,us as applyZoneMigration,T as createDnsProvider,ms as createGoDaddyValidator,gs as createPorkbunValidator,hs as createRoute53Validator,sr as delegateZone,ss as delegateZoneFromConfig,os as describeDelegation,cs as describeZoneSettings,Ua as detectDnsProvider,Qa as dnsProviders,ds as exportRoute53Zone,nr as isNameserverRegistrar,ir as isZoneHost,ls as planZoneMigration,Tt as policyTag,fn as qualifyName,is as reconcileDeclaredRecords,ns as resolveDeclaredRecords,An as sameNameservers,ps as verifyZoneParity};

package/dist/drivers/index.js

@@ -1 +1 @@
-import{Sn,wt,ar,Rt,Cn,bn,En,vn,uu,Va,K,lr,Jm,Tn,ja,ye,Ie,_e,N,ur,wn,pr,ce,za,Rn,Ka,Dn,Wa,gr,Xa,Oe,W,Ya,rt,Le,$e,nt,Se,ys,Za,pu,gu,ec,mu,it,Pn,tc,hu,fu,rc,mr,Ce,nc,Au,yu,Is,Nn,st,Iu,Su,Cu,bu,Eu,vu,Tu,wu,Ru,kn,Bn,xn,_n,On,Ln,$n,Du,Pu,hr,k,Ss,Nu,ku,Bu,ic,xu,_u,Xm,sc,Ym,Zm,Ou,Lu,eh,th,rh,oc,$u,nh,ih,sh,Mn,Un,Qn,Hn,ac,cc,dc,lc,oh,Gn,qn,Vn,jn,uc,pc,zn,Es,hc,Wn,fc,ah,ch,dh,lh}from"../chunk-bpvpq6w6.js";import"../chunk-aesvajfc.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import"../chunk-0hf0rdze.js";import"../chunk-d72ddm5x.js";export{lc as AwsBoxProvisioner,ur as AwsDriver,Bu as BOOT_PARTITION_LABEL,Ss as CloudDriverFactory,bn as DEFAULT_RPX_CERTS_DIR,ku as FIRST_BOOT_SCRIPT_PATH,dc as HetznerBoxProvisioner,gr as HetznerClient,Se as HetznerDriver,Ya as LEGACY_DRIVER_STATE_DIR,ys as LocalBoxDriver,ch as MANAGED_CACHE_POLICY_DISABLED,ah as MANAGED_CACHE_POLICY_OPTIMIZED,dh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,yu as RASPBERRY_PI_DEFAULT_SWAP_GB,Wa as REMOTE_SCRIPT_RUNNER,Tn as RPX_DIR,ja as RPX_LAUNCHER_PATH,ye as RPX_SERVICE_NAME,nc as SSH_BOOTSTRAP_MARKER_DIR,Ce as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,$n as SSH_DEPLOY_STORAGE_PATH,pu as SSH_INSECURE_HOST_KEY_OPTS,gu as SSH_KEEPALIVE_OPTS,Bn as SSH_PREFLIGHT_SCRIPT,Du as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,ac as UBUNTU_2404_AMI_PARAM,sh as acquireResizeLock,eh as applyHetznerHostOptimization,Is as assertArchSupported,Pu as assertSshComputeConfig,uc as buildAwsArtifactFetch,cc as buildBoxUserData,lh as buildCloudFrontOriginConfig,ic as buildCloudInitFirstBoot,Lu as buildHetznerHostOptimizationScript,zn as buildHostCleanupScript,pc as buildLocalArtifactFetch,K as buildRpxConfig,_e as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,Ie as buildRpxProvisionScript,mu as buildScpArgsFor,qn as buildSiteDeployScript,wn as buildSshArgs,ec as buildSshArgsFor,Nn as buildSshBootstrapScript,Vn as buildStaticSiteDeployScript,Nu as cloudDrivers,th as collectHetznerHostOptimizationReport,sc as collectHetznerResizeManifest,oh as createBoxProvisioner,k as createCloudDriver,hc as deployAllComputeSites,Es as deploySiteRelease,Va as deriveRouteId,Sn as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Un as ensureFirewall,Qn as ensureServer,Mn as ensureSshKey,_n as evaluatePreflight,Xm as executeHetznerServerResize,fu as findKnownHostKey,Ln as formatPreflightFindings,wt as formatSshFailure,vn as gatewayHostnames,N as generateUbuntuAppCloudInit,En as hasAutoWwwVariant,Za as isBoxMode,_u as isHetznerCapacityError,Cn as isLocalDatabase,hu as knownHostsLine,tc as knownHostsToken,uu as normalizeRoutePath,Oe as normalizeSshPublicKey,xn as parsePreflightFacts,xu as planHetznerServerResize,On as preflightFailed,Ym as prepareHetznerResize,$e as readDriverState,nh as readResizeCheckpoint,jn as releaseTarballTmpPath,Wn as reloadRpxGateway,Dn as remoteScriptRunner,Jm as renderRpxLauncher,fc as renewRpxCertificates,oc as resizeCheckpointPath,$u as resizeLockPath,Gn as resolveExecStart,Xa as resolveHetznerApiToken,Ou as resolveHetznerHostOptimizationPlan,Eu as resolveSshHostKeyPolicy,Iu as resolveSshHosts,Ru as resolveSshLan,Cu as resolveSshPort,bu as resolveSshPrivateKeyPath,Tu as resolveSshProfile,wu as resolveSshPublicIp,kn as resolveSshSettings,vu as resolveSshSudo,Su as resolveSshUser,Pn as scanHostKey,za as scpUpload,Hn as serverPublicIpv4,Au as sshBootstrapMarkerPath,pr as sshExec,ce as sshExecOrThrow,it as sshHostKeyFingerprint,rc as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,rh as verifyHetznerHostOptimization,Zm as verifyHetznerResize,Ka as waitForCloudInit,Rn as waitForSsh,W as wrapCloudInitUserData,nt as writeDriverState,ih as writeResizeCheckpoint};
+import{Sn,wt,ar,Rt,Cn,En,bn,vn,uu,Va,K,lr,Jm,Tn,ja,ye,Ie,xe,N,ur,wn,pr,ce,za,Rn,Ka,Dn,Wa,gr,Xa,Oe,W,Ya,rt,Le,$e,nt,Se,ys,Za,pu,gu,ec,mu,it,Pn,tc,hu,fu,rc,mr,Ce,nc,Au,yu,Is,Nn,st,Iu,Su,Cu,Eu,bu,vu,Tu,wu,Ru,kn,Bn,_n,xn,On,Ln,$n,Du,Pu,hr,k,Ss,Nu,ku,Bu,ic,_u,xu,Xm,sc,Ym,Zm,Ou,Lu,eh,th,rh,oc,$u,nh,ih,sh,Mn,Un,Qn,Hn,ac,cc,dc,lc,oh,Gn,qn,Vn,jn,uc,pc,zn,bs,hc,Wn,fc,ah,ch,dh,lh}from"../chunk-bd75na8x.js";import"../chunk-fs78rxy1.js";import"../chunk-22ybphxa.js";import"../chunk-3bz7xz2d.js";import"../chunk-8a02v9gs.js";import"../chunk-97a7sxpe.js";import"../chunk-42ngwzvc.js";export{lc as AwsBoxProvisioner,ur as AwsDriver,Bu as BOOT_PARTITION_LABEL,Ss as CloudDriverFactory,En as DEFAULT_RPX_CERTS_DIR,ku as FIRST_BOOT_SCRIPT_PATH,dc as HetznerBoxProvisioner,gr as HetznerClient,Se as HetznerDriver,Ya as LEGACY_DRIVER_STATE_DIR,ys as LocalBoxDriver,ch as MANAGED_CACHE_POLICY_DISABLED,ah as MANAGED_CACHE_POLICY_OPTIMIZED,dh as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,yu as RASPBERRY_PI_DEFAULT_SWAP_GB,Wa as REMOTE_SCRIPT_RUNNER,Tn as RPX_DIR,ja as RPX_LAUNCHER_PATH,ye as RPX_SERVICE_NAME,nc as SSH_BOOTSTRAP_MARKER_DIR,Ce as SSH_BOOTSTRAP_VERSION,st as SSH_DEFAULTS,$n as SSH_DEPLOY_STORAGE_PATH,pu as SSH_INSECURE_HOST_KEY_OPTS,gu as SSH_KEEPALIVE_OPTS,Bn as SSH_PREFLIGHT_SCRIPT,Du as SSH_SKIP_BOOTSTRAP_ENV,hr as SshDriver,mr as SystemSshTransport,ac as UBUNTU_2404_AMI_PARAM,sh as acquireResizeLock,eh as applyHetznerHostOptimization,Is as assertArchSupported,Pu as assertSshComputeConfig,uc as buildAwsArtifactFetch,cc as buildBoxUserData,lh as buildCloudFrontOriginConfig,ic as buildCloudInitFirstBoot,Lu as buildHetznerHostOptimizationScript,zn as buildHostCleanupScript,pc as buildLocalArtifactFetch,K as buildRpxConfig,xe as buildRpxFragmentRefreshScript,lr as buildRpxLbConfig,Ie as buildRpxProvisionScript,mu as buildScpArgsFor,qn as buildSiteDeployScript,wn as buildSshArgs,ec as buildSshArgsFor,Nn as buildSshBootstrapScript,Vn as buildStaticSiteDeployScript,Nu as cloudDrivers,th as collectHetznerHostOptimizationReport,sc as collectHetznerResizeManifest,oh as createBoxProvisioner,k as createCloudDriver,hc as deployAllComputeSites,bs as deploySiteRelease,Va as deriveRouteId,Sn as describeScriptSyntaxError,rt as driverStateDir,Le as driverStatePath,Un as ensureFirewall,Qn as ensureServer,Mn as ensureSshKey,xn as evaluatePreflight,Xm as executeHetznerServerResize,fu as findKnownHostKey,Ln as formatPreflightFindings,wt as formatSshFailure,vn as gatewayHostnames,N as generateUbuntuAppCloudInit,bn as hasAutoWwwVariant,Za as isBoxMode,xu as isHetznerCapacityError,Cn as isLocalDatabase,hu as knownHostsLine,tc as knownHostsToken,uu as normalizeRoutePath,Oe as normalizeSshPublicKey,_n as parsePreflightFacts,_u as planHetznerServerResize,On as preflightFailed,Ym as prepareHetznerResize,$e as readDriverState,nh as readResizeCheckpoint,jn as releaseTarballTmpPath,Wn as reloadRpxGateway,Dn as remoteScriptRunner,Jm as renderRpxLauncher,fc as renewRpxCertificates,oc as resizeCheckpointPath,$u as resizeLockPath,Gn as resolveExecStart,Xa as resolveHetznerApiToken,Ou as resolveHetznerHostOptimizationPlan,bu as resolveSshHostKeyPolicy,Iu as resolveSshHosts,Ru as resolveSshLan,Cu as resolveSshPort,Eu as resolveSshPrivateKeyPath,Tu as resolveSshProfile,wu as resolveSshPublicIp,kn as resolveSshSettings,vu as resolveSshSudo,Su as resolveSshUser,Pn as scanHostKey,za as scpUpload,Hn as serverPublicIpv4,Au as sshBootstrapMarkerPath,pr as sshExec,ce as sshExecOrThrow,it as sshHostKeyFingerprint,rc as sshKnownHostsPath,Rt as summarizeRemoteFailures,ar as surfaceRemoteNotices,rh as verifyHetznerHostOptimization,Zm as verifyHetznerResize,Ka as waitForCloudInit,Rn as waitForSsh,W as wrapCloudInitUserData,nt as writeDriverState,ih as writeResizeCheckpoint};

package/dist/drivers/shared/deploy-script.d.ts

@@ -10,7 +10,7 @@
  * release (no window where the code is half-replaced). Old releases are kept for
  * instant rollback. See {@link import('./releases')}.
  */
-import type { SharedPathEntry } from '@ts-cloud/core';
+import type { SharedPathEntry, SiteLivenessConfig } from '@ts-cloud/core';
 /**
  * Translate a `start` command into an absolute systemd ExecStart.
  *
@@ -38,21 +38,6 @@ import type { SharedPathEntry } from '@ts-cloud/core';
  * rather than emitting a unit that fails to start.
  */
 export declare function resolveExecStart(start: string, runtime: 'bun' | 'node' | 'deno', workingDirectory?: string): string;
-/**
- * Shell that installs a recurring liveness check for one ported service.
- *
- * Three files: a check script, a oneshot service that runs it, and a timer.
- * The script resolves the unit to probe at run time rather than baking in a
- * release id, so it keeps working after the next deploy replaces the instance.
- *
- * `curl` without `-f`: any HTTP response means the process is answering, and a
- * 404 on `/` is a routing opinion, not a wedged event loop. Only a connection
- * failure or a timeout counts against it.
- *
- * A restart needs N consecutive failures, counted in a file under /run, so a
- * single slow moment cannot bounce a healthy service; the counter resets on the
- * first good response. flock keeps two ticks from overlapping.
- */
 /**
  * Stop the implicit per-template slice from silently capping the service.
  *
@@ -138,15 +123,65 @@ export declare function buildAutoMemoryHigh(unitFile: string): string[];
  */
 export declare function buildCommitmentReport(): string[];
 export declare function buildSliceReconcile(instance: string): string[];
+/**
+ * Liveness probe settings for a ported site - the same shape as
+ * `SiteConfig.liveness`. See {@link LIVENESS_DEFAULTS} for unset fields.
+ */
+export type LivenessOptions = SiteLivenessConfig;
+export declare const LIVENESS_DEFAULTS: {
+    readonly path: '/';
+    readonly intervalSeconds: 60;
+    readonly failuresBeforeRestart: 3;
+    readonly timeoutSeconds: 10;
+    readonly startupGraceSeconds: 600;
+    readonly maxBackoffSeconds: 3600;
+    /** The wait before the second consecutive restart; it doubles from there. */
+    readonly backoffBaseSeconds: 300;
+};
+/**
+ * Shell that installs a recurring liveness check for one ported service.
+ *
+ * Three files: a check script, a oneshot service that runs it, and a timer.
+ * The script resolves the unit to probe at run time rather than baking in a
+ * release id, so it keeps working after the next deploy replaces the instance.
+ *
+ * `curl` without `-f`: any HTTP response means the process is answering, and a
+ * 404 on `/` is a routing opinion, not a wedged event loop. Only a refused
+ * connection or no response within `timeoutSeconds` counts against it. A
+ * timeout has to count - a wedged process still has its port bound and the
+ * kernel still accepts into its backlog, so "connects but never answers" is
+ * exactly the failure this exists for - which is why the budget is generous
+ * rather than why timeouts are forgiven.
+ *
+ * A restart needs N consecutive failures, counted in a file under /run, so a
+ * single slow moment cannot bounce a healthy service; the counter resets on the
+ * first good response. flock keeps two ticks from overlapping.
+ *
+ * **Startup grace.** A check against a unit younger than `startupGraceSeconds`
+ * is not counted. Without it the probe turned a slow boot into an outage loop:
+ * a release whose image warm-up kept its main thread busy for minutes after
+ * binding was restarted three minutes into each boot, three times running.
+ * Every restart threw the warm-up away and began it again, so visitors saw
+ * nine minutes of 502s from a release that would have been healthy in five.
+ * The age is the unit's own `ActiveEnterTimestampMonotonic` against
+ * `/proc/uptime`, which a restart resets, with the main PID's elapsed time as
+ * the fallback.
+ *
+ * **Back-off.** Restarts the probe itself issued are remembered with the time
+ * of the last one. The second in a row waits at least five minutes after the
+ * first and each later one doubles, capped at `maxBackoffSeconds`, so a
+ * release that can never come up is restarted a handful of times and then
+ * about hourly, not every few minutes forever. The streak is forgotten once
+ * the service answers with no probe restart in the last `maxBackoffSeconds`,
+ * and a deploy starts it afresh. Every held-off restart says so in the
+ * journal under the `<unit>-liveness` tag.
+ */
 export declare function buildLivenessUnits(options: {
     unitBase: string;
     /** systemd unit to restart. A `<base>@*.service` glob resolves at run time. */
     unitPattern: string;
     port: number;
-    path?: string;
-    intervalSeconds?: number;
-    failuresBeforeRestart?: number;
-}): string[];
+} & LivenessOptions): string[];
 export interface BuildSiteDeployScriptOptions {
     siteName: string;
     slug: string;
@@ -218,18 +253,16 @@ export interface BuildSiteDeployScriptOptions {
      * The probe is an HTTP request rather than a listener check for that exact
      * reason — `ss` would have called the wedged process healthy.
      *
+     * A unit younger than `startupGraceSeconds` is never restarted, and
+     * consecutive restarts back off, so a slow boot cannot become a restart
+     * loop. See {@link buildLivenessUnits}.
+     *
      * Set `false` to opt out (a service that legitimately answers nothing on its
      * port, or one where a restart is more dangerous than an outage).
-     * @default enabled, `/` every 60s, restart after 3 consecutive failures
+     * @default enabled, `/` every 60s with a 10s timeout, restart after 3
+     * consecutive failures once the unit is 10 minutes old
      */
-    liveness?: false | {
-        /** Path to request. @default '/' */
-        path?: string;
-        /** Seconds between checks. @default 60 */
-        intervalSeconds?: number;
-        /** Consecutive failures before a restart. @default 3 */
-        failuresBeforeRestart?: number;
-    };
+    liveness?: false | LivenessOptions;
     /**
      * systemd `MemoryHigh` for the app unit. See {@link SiteConfig.memoryHigh}.
      * @default '2G'