@stacksjs/ts-cloud 0.16.25 → 0.16.26

package/dist/bin/dashboard-server.js

@@ -1 +1 @@
-import"./chunk-t5gkbppg.js";import"./chunk-21jwbrap.js";import"./chunk-n5zwm2z4.js";import{ir}from"./chunk-9rya3733.js";import"./chunk-q3xwh0r8.js";import"./chunk-2q27v6vz.js";import"./chunk-n8ya6q6d.js";import"./chunk-nxyhheav.js";import"./chunk-8wnpx6n2.js";import"./chunk-v4e4726j.js";import"./chunk-3kvz4kyq.js";import"./chunk-w23en85y.js";import"./chunk-ntmnpteh.js";import"./chunk-4r46kw46.js";import"./chunk-6nm91cfw.js";import"./chunk-5mk3sxpw.js";import"./chunk-p1cv4n00.js";import"./chunk-1j9vy88a.js";import"./chunk-0xxc6dy8.js";import"./chunk-9066j2kz.js";import"./chunk-3jjggqfj.js";import"./chunk-y4g86dpe.js";import"./chunk-fdsh3m2q.js";import"./chunk-7412q5cz.js";import"./chunk-y6rgvb7r.js";import"./chunk-dh6kj6ce.js";import n from"node:process";function r(o){let e=n.argv.indexOf(o);return e===-1?void 0:n.argv[e+1]}function t(o){return n.argv.includes(o)}async function i(){let o=await ir({host:r("--host")??"127.0.0.1",port:Number(r("--port")??7676),environment:r("--env"),box:t("--box"),verbose:t("--verbose")});console.log("ts-cloud Local Dashboard"),console.log(`Serving ${o.url}`),await new Promise((e)=>{let s=()=>{o.server.stop(!0),e()};n.once("SIGINT",s),n.once("SIGTERM",s)})}i();
+import"./chunk-4a8qt6e8.js";import"./chunk-817q3s2p.js";import"./chunk-8k87zpnp.js";import{ir}from"./chunk-85733wwc.js";import"./chunk-q3xwh0r8.js";import"./chunk-2q27v6vz.js";import"./chunk-fjxsj9z9.js";import"./chunk-cgyqnbcm.js";import"./chunk-5ky6qf18.js";import"./chunk-qsyna6ng.js";import"./chunk-h3shxxh4.js";import"./chunk-w23en85y.js";import"./chunk-f4rp62j4.js";import"./chunk-4r46kw46.js";import"./chunk-6nm91cfw.js";import"./chunk-z3962as2.js";import"./chunk-8tp6srfc.js";import"./chunk-1j9vy88a.js";import"./chunk-e3tjy3wg.js";import"./chunk-2857cbf1.js";import"./chunk-3jjggqfj.js";import"./chunk-0apv4e8e.js";import"./chunk-0hbrkdrc.js";import"./chunk-7412q5cz.js";import"./chunk-y6rgvb7r.js";import"./chunk-dh6kj6ce.js";import n from"node:process";function r(o){let e=n.argv.indexOf(o);return e===-1?void 0:n.argv[e+1]}function t(o){return n.argv.includes(o)}async function i(){let o=await ir({host:r("--host")??"127.0.0.1",port:Number(r("--port")??7676),environment:r("--env"),box:t("--box"),verbose:t("--verbose")});console.log("ts-cloud Local Dashboard"),console.log(`Serving ${o.url}`),await new Promise((e)=>{let s=()=>{o.server.stop(!0),e()};n.once("SIGINT",s),n.once("SIGTERM",s)})}i();

package/dist/{chunk-826gp2kd.js → chunk-k75jv8s6.js}

@@ -1,4 +1,4 @@
-import{Cd,L,d,bd,M,p,ge,g,Gt,Dd,uo,po,_d,Ld,$d,Ud,Kr,So,Jt,Qd,Hd,Wd,Jd}from"./chunk-w23wrsa4.js";import{x,u}from"./chunk-q0g0rjn3.js";import{pe,Lt,D,$t,s,mi,Us,kr,qc,Vc,Z,c,Gs,qe,Br,jc,Mt,Vs,zc,_r,js,xr,Ai,Qt,Ci,Ei,Ve,Ht,md,hd,vi,Ti,ht,so,i,wi,ao,co}from"./chunk-49p5cx21.js";import{n}from"./chunk-wrpnnrdf.js";import{o}from"./chunk-2nma0bd8.js";import{hn}from"./chunk-r1730x8g.js";import{Ie}from"./chunk-3zv0e36t.js";import{fn,Cu,cs,k,w,ds,Eu}from"./chunk-e44ajkha.js";import{Ae,nr,gs,tt,z,se,b,ye,or,oe,nt,cr}from"./chunk-0p7ddjt6.js";import{K}from"./chunk-tvwrthfq.js";import{v,mr,Ds,_t,hr,xu,xt,Lu,pc,Ue,ct,jn,_,Ot,vr}from"./chunk-7p1653g6.js";import{y}from"./chunk-jwx5t3vf.js";import{Le}from"./chunk-dm6kyz6e.js";import{we}from"./chunk-x9bpm5s1.js";import{f}from"./chunk-08tswmb3.js";function an(e){let t=Dc(e.name),r=Xu(e.configText);if(ww(e.configText,r.start,r.end,t))throw Error(`Site '${t}' already exists in cloud.config.ts`);let a=mh({...e,name:t}),l=e.configText.slice(0,r.end).trimEnd(),m=e.configText.slice(r.end),h=l.endsWith("{")?`
+import{Cd,L,d,bd,M,p,ge,g,Gt,Dd,uo,po,_d,Ld,$d,Ud,Kr,So,Jt,Qd,Hd,Wd,Jd}from"./chunk-w23wrsa4.js";import{x,u}from"./chunk-q0g0rjn3.js";import{pe,Lt,D,$t,s,mi,Us,kr,qc,Vc,Z,c,Gs,qe,Br,jc,Mt,Vs,zc,_r,js,xr,Ai,Qt,Ci,Ei,Ve,Ht,md,hd,vi,Ti,ht,so,i,wi,ao,co}from"./chunk-49p5cx21.js";import{n}from"./chunk-wrpnnrdf.js";import{o}from"./chunk-2nma0bd8.js";import{hn}from"./chunk-mte9da2p.js";import{Ie}from"./chunk-3zv0e36t.js";import{fn,Cu,cs,k,w,ds,Eu}from"./chunk-e44ajkha.js";import{Ae,nr,gs,tt,z,se,b,ye,or,oe,nt,cr}from"./chunk-0p7ddjt6.js";import{K}from"./chunk-tvwrthfq.js";import{v,mr,Ds,_t,hr,xu,xt,Lu,pc,Ue,ct,jn,_,Ot,vr}from"./chunk-7p1653g6.js";import{y}from"./chunk-mdqnpbbc.js";import{Le}from"./chunk-dm6kyz6e.js";import{we}from"./chunk-x9bpm5s1.js";import{f}from"./chunk-08tswmb3.js";function an(e){let t=Dc(e.name),r=Xu(e.configText);if(ww(e.configText,r.start,r.end,t))throw Error(`Site '${t}' already exists in cloud.config.ts`);let a=mh({...e,name:t}),l=e.configText.slice(0,r.end).trimEnd(),m=e.configText.slice(r.end),h=l.endsWith("{")?`
 `:l.endsWith(",")?`
 
 `:`,

package/dist/{chunk-jwx5t3vf.js → chunk-mdqnpbbc.js}

@@ -1,4 +1,4 @@
-import{n}from"./chunk-wrpnnrdf.js";import{I}from"./chunk-rxs4y74z.js";function S(e){let i=Array.isArray(e?.Items)?e.Items:I(e?.Items?.CNAME);return{Quantity:i.length,Items:i.map(String)}}class y{client;constructor(e,i){this.client=i??new n(void 0,{profile:e})}collectionItems(e,i){let t=e?.Items??e?.[i];if(!t)return[];if(Array.isArray(t))return t;let r=t[i]??t.Item;if(r===void 0)return typeof t==="object"&&(t.Id||t.PathPattern)?[t]:[];return Array.isArray(r)?r:[r]}validateExistingOriginInput(e,i){if(!/^[A-Z0-9]{8,32}$/.test(e))throw Error("CloudFront distribution ID is invalid");if(!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(i.id))throw Error("CloudFront origin ID is invalid");if(!/^(?=.{1,253}$)(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\.)+[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/.test(i.domainName))throw Error("CloudFront origin must be a hostname without a scheme or path");let t=i.pathPattern.startsWith("/")?i.pathPattern:`/${i.pathPattern}`;if(t==="/"||t==="/*"||!/^\/[A-Za-z0-9_.*?~!$&'()+,;=:@%/-]{1,255}$/.test(t))throw Error("CloudFront path pattern must be a non-default absolute pattern");if(i.originPath&&(!i.originPath.startsWith("/")||i.originPath.includes("..")))throw Error("CloudFront origin path must be absolute and traversal-free");if(Object.entries(i.customHeaders??{}).some(([r,o])=>!/^[A-Za-z0-9-]{1,64}$/.test(r)||!o||o.length>1024))throw Error("CloudFront custom origin headers are invalid");return{...i,pathPattern:t}}async upsertExistingDistributionOrigin(e,i){let t=this.validateExistingOriginInput(e,i),r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),o=r.headers?.etag||r.headers?.ETag||r.ETag||"",s=r.body?.DistributionConfig||r.DistributionConfig||r.body;if(!s||s.Enabled===void 0||!o)throw Error("Failed to read an ETag-protected CloudFront distribution config");let a=this.collectionItems(s.Origins,"Origin"),c=this.collectionItems(s.CacheBehaviors,"CacheBehavior"),g=a.find((p)=>String(p.Id)===t.id),u=c.find((p)=>String(p.PathPattern)===t.pathPattern);if(g&&String(g.DomainName)!==t.domainName&&!t.replaceExisting)throw Error(`Origin ${t.id} already targets ${g.DomainName}; pass replaceExisting only after reviewing the live config`);if(u&&String(u.TargetOriginId)!==t.id&&!t.replaceExisting)throw Error(`Path ${t.pathPattern} already targets ${u.TargetOriginId}; pass replaceExisting only after reviewing the live config`);let d={Id:t.id,DomainName:t.domainName,OriginPath:t.originPath??"",CustomHeaders:{Quantity:Object.keys(t.customHeaders??{}).length,...Object.keys(t.customHeaders??{}).length?{Items:{OriginCustomHeader:Object.entries(t.customHeaders).map(([p,A])=>({HeaderName:p,HeaderValue:A}))}}:{}},CustomOriginConfig:{HTTPPort:80,HTTPSPort:443,OriginProtocolPolicy:t.protocolPolicy??"https-only",OriginSslProtocols:{Quantity:1,Items:{SslProtocol:["TLSv1.2"]}},OriginReadTimeout:30,OriginKeepaliveTimeout:5},ConnectionAttempts:3,ConnectionTimeout:10,...t.originAccessControlId?{OriginAccessControlId:t.originAccessControlId}:{}},h=["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],l={PathPattern:t.pathPattern,TargetOriginId:t.id,ViewerProtocolPolicy:"redirect-to-https",Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",AllowedMethods:{Quantity:h.length,Items:{Method:h},CachedMethods:{Quantity:2,Items:{Method:["GET","HEAD"]}}},SmoothStreaming:!1,FieldLevelEncryptionId:"",TrustedSigners:{Enabled:!1,Quantity:0},TrustedKeyGroups:{Enabled:!1,Quantity:0},LambdaFunctionAssociations:{Quantity:0},FunctionAssociations:{Quantity:0}},f=g?a.map((p)=>String(p.Id)===t.id?d:p):[...a,d],m=u?c.map((p)=>String(p.PathPattern)===t.pathPattern?l:p):[...c,l],b=JSON.stringify(a)!==JSON.stringify(f)||JSON.stringify(c)!==JSON.stringify(m);if(!b||t.dryRun)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:b,applied:!1,etag:o};s.Origins={Quantity:f.length,Items:{Origin:f}},s.CacheBehaviors={Quantity:m.length,...m.length?{Items:{CacheBehavior:m}}:{}};let E=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:this.buildDistributionConfigXml(s),headers:{"Content-Type":"application/xml","If-Match":o},returnHeaders:!0});return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!0,etag:E.headers?.etag||E.headers?.ETag||""}}async removeExistingDistributionOrigin(e,i){let t=this.validateExistingOriginInput(e,i),r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),o=r.headers?.etag||r.headers?.ETag||r.ETag||"",s=r.body?.DistributionConfig||r.DistributionConfig||r.body;if(!s||s.Enabled===void 0||!o)throw Error("Failed to read an ETag-protected CloudFront distribution config");let a=this.collectionItems(s.Origins,"Origin"),c=this.collectionItems(s.CacheBehaviors,"CacheBehavior"),g=a.find((m)=>String(m.Id)===t.id),u=c.find((m)=>String(m.PathPattern)===t.pathPattern);if(g&&String(g.DomainName)!==t.domainName)throw Error(`Origin ${t.id} no longer targets ${t.domainName}; refusing ambiguous removal`);if(u&&String(u.TargetOriginId)!==t.id)throw Error(`Path ${t.pathPattern} no longer targets ${t.id}; refusing ambiguous removal`);if(!u)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!1,applied:!1,originRemoved:!1,etag:o};let d=c.filter((m)=>String(m.PathPattern)!==t.pathPattern),h=String(s.DefaultCacheBehavior?.TargetOriginId)===t.id||d.some((m)=>String(m.TargetOriginId)===t.id),l=h?a:a.filter((m)=>String(m.Id)!==t.id);if(t.dryRun)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!1,originRemoved:!h&&!!g,etag:o};s.Origins={Quantity:l.length,Items:{Origin:l}},s.CacheBehaviors={Quantity:d.length,...d.length?{Items:{CacheBehavior:d}}:{}};let f=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:this.buildDistributionConfigXml(s),headers:{"Content-Type":"application/xml","If-Match":o},returnHeaders:!0});return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!0,originRemoved:!h&&!!g,etag:f.headers?.etag||f.headers?.ETag||""}}async createInvalidation(e){let i=e.callerReference||Date.now().toString(),t=`<?xml version="1.0" encoding="UTF-8"?>
+import{n}from"./chunk-wrpnnrdf.js";import{I}from"./chunk-rxs4y74z.js";function S(e){let i=Array.isArray(e?.Items)?e.Items:I(e?.Items?.CNAME);return{Quantity:i.length,Items:i.map(String)}}class y{client;constructor(e,i){this.client=i??new n(void 0,{profile:e})}collectionItems(e,i){let t=e?.Items??e?.[i];if(!t)return[];if(Array.isArray(t))return t;let r=t[i]??t.Item;if(r===void 0)return typeof t==="object"&&(t.Id||t.PathPattern)?[t]:[];return Array.isArray(r)?r:[r]}validateExistingOriginInput(e,i){if(!/^[A-Z0-9]{8,32}$/.test(e))throw Error("CloudFront distribution ID is invalid");if(!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(i.id))throw Error("CloudFront origin ID is invalid");if(!/^(?=.{1,253}$)(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\.)+[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/.test(i.domainName))throw Error("CloudFront origin must be a hostname without a scheme or path");let t=i.pathPattern.startsWith("/")?i.pathPattern:`/${i.pathPattern}`;if(t==="/"||t==="/*"||!/^\/[A-Za-z0-9_.*?~!$&'()+,;=:@%/-]{1,255}$/.test(t))throw Error("CloudFront path pattern must be a non-default absolute pattern");if(i.originPath&&(!i.originPath.startsWith("/")||i.originPath.includes("..")))throw Error("CloudFront origin path must be absolute and traversal-free");if(Object.entries(i.customHeaders??{}).some(([r,o])=>!/^[A-Za-z0-9-]{1,64}$/.test(r)||!o||o.length>1024))throw Error("CloudFront custom origin headers are invalid");return{...i,pathPattern:t}}async upsertExistingDistributionOrigin(e,i){let t=this.validateExistingOriginInput(e,i),r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),o=r.headers?.etag||r.headers?.ETag||r.ETag||"",s=r.body?.DistributionConfig||r.DistributionConfig||r.body;if(!s||s.Enabled===void 0||!o)throw Error("Failed to read an ETag-protected CloudFront distribution config");let a=this.collectionItems(s.Origins,"Origin"),c=this.collectionItems(s.CacheBehaviors,"CacheBehavior"),g=a.find((C)=>String(C.Id)===t.id),u=c.find((C)=>String(C.PathPattern)===t.pathPattern);if(g&&String(g.DomainName)!==t.domainName&&!t.replaceExisting)throw Error(`Origin ${t.id} already targets ${g.DomainName}; pass replaceExisting only after reviewing the live config`);if(u&&String(u.TargetOriginId)!==t.id&&!t.replaceExisting)throw Error(`Path ${t.pathPattern} already targets ${u.TargetOriginId}; pass replaceExisting only after reviewing the live config`);let d={Id:t.id,DomainName:t.domainName,OriginPath:t.originPath??"",CustomHeaders:{Quantity:Object.keys(t.customHeaders??{}).length,...Object.keys(t.customHeaders??{}).length?{Items:{OriginCustomHeader:Object.entries(t.customHeaders).map(([C,A])=>({HeaderName:C,HeaderValue:A}))}}:{}},CustomOriginConfig:{HTTPPort:80,HTTPSPort:443,OriginProtocolPolicy:t.protocolPolicy??"https-only",OriginSslProtocols:{Quantity:1,Items:{SslProtocol:["TLSv1.2"]}},OriginReadTimeout:30,OriginKeepaliveTimeout:5},ConnectionAttempts:3,ConnectionTimeout:10,...t.originAccessControlId?{OriginAccessControlId:t.originAccessControlId}:{}},h=["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],l={PathPattern:t.pathPattern,TargetOriginId:t.id,ViewerProtocolPolicy:"redirect-to-https",Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",AllowedMethods:{Quantity:h.length,Items:{Method:h},CachedMethods:{Quantity:2,Items:{Method:["GET","HEAD"]}}},SmoothStreaming:!1,FieldLevelEncryptionId:"",TrustedSigners:{Enabled:!1,Quantity:0},TrustedKeyGroups:{Enabled:!1,Quantity:0},LambdaFunctionAssociations:{Quantity:0},FunctionAssociations:{Quantity:0}},f=g?a.map((C)=>String(C.Id)===t.id?d:C):[...a,d],m=u?c.map((C)=>String(C.PathPattern)===t.pathPattern?l:C):[...c,l],p=JSON.stringify(a)!==JSON.stringify(f)||JSON.stringify(c)!==JSON.stringify(m);if(!p||t.dryRun)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:p,applied:!1,etag:o};s.Origins={Quantity:f.length,Items:{Origin:f}},s.CacheBehaviors={Quantity:m.length,...m.length?{Items:{CacheBehavior:m}}:{}};let E=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:this.buildDistributionConfigXml(s),headers:{"Content-Type":"application/xml","If-Match":o},returnHeaders:!0});return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!0,etag:E.headers?.etag||E.headers?.ETag||""}}async removeExistingDistributionOrigin(e,i){let t=this.validateExistingOriginInput(e,i),r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),o=r.headers?.etag||r.headers?.ETag||r.ETag||"",s=r.body?.DistributionConfig||r.DistributionConfig||r.body;if(!s||s.Enabled===void 0||!o)throw Error("Failed to read an ETag-protected CloudFront distribution config");let a=this.collectionItems(s.Origins,"Origin"),c=this.collectionItems(s.CacheBehaviors,"CacheBehavior"),g=a.find((m)=>String(m.Id)===t.id),u=c.find((m)=>String(m.PathPattern)===t.pathPattern);if(g&&String(g.DomainName)!==t.domainName)throw Error(`Origin ${t.id} no longer targets ${t.domainName}; refusing ambiguous removal`);if(u&&String(u.TargetOriginId)!==t.id)throw Error(`Path ${t.pathPattern} no longer targets ${t.id}; refusing ambiguous removal`);if(!u)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!1,applied:!1,originRemoved:!1,etag:o};let d=c.filter((m)=>String(m.PathPattern)!==t.pathPattern),h=String(s.DefaultCacheBehavior?.TargetOriginId)===t.id||d.some((m)=>String(m.TargetOriginId)===t.id),l=h?a:a.filter((m)=>String(m.Id)!==t.id);if(t.dryRun)return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!1,originRemoved:!h&&!!g,etag:o};s.Origins={Quantity:l.length,Items:{Origin:l}},s.CacheBehaviors={Quantity:d.length,...d.length?{Items:{CacheBehavior:d}}:{}};let f=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:this.buildDistributionConfigXml(s),headers:{"Content-Type":"application/xml","If-Match":o},returnHeaders:!0});return{distributionId:e,originId:t.id,domainName:t.domainName,pathPattern:t.pathPattern,changed:!0,applied:!0,originRemoved:!h&&!!g,etag:f.headers?.etag||f.headers?.ETag||""}}async createInvalidation(e){let i=e.callerReference||Date.now().toString(),t=`<?xml version="1.0" encoding="UTF-8"?>
 <InvalidationBatch>
   <Paths>
     <Quantity>${e.paths.length}</Quantity>
@@ -15,8 +15,8 @@ ${c}  <${l}>${i(f)}</${l}>
 ${c}</Items>
 `;else if(typeof f==="object"&&!Array.isArray(f))return`${c}<Items>
 ${o(l,f,c+"  ",s)}${c}</Items>
-`}if(h.length===1&&Array.isArray(a[h[0]])){let l=h[0],f=a[l],m="";for(let b of f)if(typeof b==="string")m+=`${c}  <${l}>${i(b)}</${l}>
-`;else m+=o(l,b,c+"  ",s);return`${c}<Items>
+`}if(h.length===1&&Array.isArray(a[h[0]])){let l=h[0],f=a[l],m="";for(let p of f)if(typeof p==="string")m+=`${c}  <${l}>${i(p)}</${l}>
+`;else m+=o(l,p,c+"  ",s);return`${c}<Items>
 ${m}${c}</Items>
 `}if(Array.isArray(a)){let l="",f=d||"Item";for(let m of a)if(typeof m==="string")l+=`${c}  <${f}>${i(m)}</${f}>
 `;else l+=o(f,m,c+"  ",s);return`${c}<Items>
@@ -63,7 +63,7 @@ ${Object.entries(e).filter(([s])=>!s.startsWith("@_")).map(([s,a])=>o(s,a,"  ","
   <SigningProtocol>${r}</SigningProtocol>
   <SigningBehavior>${o}</SigningBehavior>
   <OriginAccessControlOriginType>${s}</OriginAccessControlOriginType>
-</OriginAccessControlConfig>`,c=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/origin-access-control",body:a,headers:{"Content-Type":"application/xml"},returnHeaders:!0}),g=c.body?.OriginAccessControl||c.OriginAccessControl||c.body||c;return{Id:g.Id,Name:g.OriginAccessControlConfig?.Name||i,Description:g.OriginAccessControlConfig?.Description||t,SigningProtocol:g.OriginAccessControlConfig?.SigningProtocol||r,SigningBehavior:g.OriginAccessControlConfig?.SigningBehavior||o,OriginAccessControlOriginType:g.OriginAccessControlConfig?.OriginAccessControlOriginType||s,ETag:c.headers?.etag||c.ETag||""}}async findOrCreateOriginAccessControl(e,i="s3"){let r=(await this.listOriginAccessControls()).find((s)=>s.Name===e&&s.OriginAccessControlOriginType===i);if(r)return{Id:r.Id,Name:r.Name,isNew:!1};let o=await this.createOriginAccessControl({name:e,originType:i});return{Id:o.Id,Name:o.Name,isNew:!0}}async createDistributionForS3(e){let{bucketName:i,bucketRegion:t,originAccessControlId:r,aliases:o=[],certificateArn:s,defaultRootObject:a="index.html",comment:c=`Distribution for ${i}`,priceClass:g="PriceClass_100",enabled:u=!0,trustedKeyGroupIds:d=[],mediaDelivery:h=!1}=e,l=`S3-${i}`,f=`${i}.s3.${t}.amazonaws.com`,m=`${Date.now()}-${Math.random().toString(36).slice(2)}`,b=d.length>0?`<TrustedKeyGroups>
+</OriginAccessControlConfig>`,c=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/origin-access-control",body:a,headers:{"Content-Type":"application/xml"},returnHeaders:!0}),g=c.body?.OriginAccessControl||c.OriginAccessControl||c.body||c;return{Id:g.Id,Name:g.OriginAccessControlConfig?.Name||i,Description:g.OriginAccessControlConfig?.Description||t,SigningProtocol:g.OriginAccessControlConfig?.SigningProtocol||r,SigningBehavior:g.OriginAccessControlConfig?.SigningBehavior||o,OriginAccessControlOriginType:g.OriginAccessControlConfig?.OriginAccessControlOriginType||s,ETag:c.headers?.etag||c.ETag||""}}async findOrCreateOriginAccessControl(e,i="s3"){let r=(await this.listOriginAccessControls()).find((s)=>s.Name===e&&s.OriginAccessControlOriginType===i);if(r)return{Id:r.Id,Name:r.Name,isNew:!1};let o=await this.createOriginAccessControl({name:e,originType:i});return{Id:o.Id,Name:o.Name,isNew:!0}}async createDistributionForS3(e){let{bucketName:i,bucketRegion:t,originAccessControlId:r,aliases:o=[],certificateArn:s,defaultRootObject:a="index.html",comment:c=`Distribution for ${i}`,priceClass:g="PriceClass_100",enabled:u=!0,trustedKeyGroupIds:d=[],mediaDelivery:h=!1}=e,l=`S3-${i}`,f=`${i}.s3.${t}.amazonaws.com`,m=`${Date.now()}-${Math.random().toString(36).slice(2)}`,p=d.length>0?`<TrustedKeyGroups>
       <Enabled>true</Enabled>
       <Quantity>${d.length}</Quantity>
       <Items>${d.map((P)=>`<KeyGroup>${P}</KeyGroup>`).join("")}</Items>
@@ -73,9 +73,9 @@ ${Object.entries(e).filter(([s])=>!s.startsWith("@_")).map(([s,a])=>o(s,a,"  ","
       ${o.map((P)=>`<CNAME>${P}</CNAME>`).join(`
       `)}
     </Items>
-  </Aliases>`;let p=`<ViewerCertificate>
+  </Aliases>`;let C=`<ViewerCertificate>
     <CloudFrontDefaultCertificate>true</CloudFrontDefaultCertificate>
-  </ViewerCertificate>`;if(s&&o.length>0)p=`<ViewerCertificate>
+  </ViewerCertificate>`;if(s&&o.length>0)C=`<ViewerCertificate>
     <ACMCertificateArn>${s}</ACMCertificateArn>
     <SSLSupportMethod>sni-only</SSLSupportMethod>
     <MinimumProtocolVersion>TLSv1.2_2021</MinimumProtocolVersion>
@@ -118,10 +118,10 @@ ${Object.entries(e).filter(([s])=>!s.startsWith("@_")).map(([s,a])=>o(s,a,"  ","
     </AllowedMethods>
     <Compress>true</Compress>
     <CachePolicyId>658327ea-f89d-4fab-a63d-7e88639e58f6</CachePolicyId>
-    ${b}
+    ${p}
   </DefaultCacheBehavior>
   ${E}
-  ${p}
+  ${C}
   <PriceClass>${g}</PriceClass>
   <Enabled>${u}</Enabled>
   <HttpVersion>http2and3</HttpVersion>
@@ -137,5 +137,5 @@ ${Object.entries(e).filter(([s])=>!s.startsWith("@_")).map(([s,a])=>o(s,a,"  ","
       </CustomErrorResponse>
     </Items>
   </CustomErrorResponses>`}
-</DistributionConfig>`,C=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/distribution",body:A,headers:{"Content-Type":"application/xml"},returnHeaders:!0}),T=C.body?.Distribution||C.Distribution||C.body||C;return{Id:T.Id,ARN:T.ARN,DomainName:T.DomainName,Status:T.Status,ETag:C.headers?.etag||C.ETag||""}}async createMediaDistributionForS3(e){return this.createDistributionForS3({...e,defaultRootObject:"",mediaDelivery:!0,comment:e.comment??`Media distribution for ${e.bucketName}`})}async listPublicKeys(){let e=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:"/2020-05-31/public-key"});return this.collectionItems(e.PublicKeyList??e,"PublicKeySummary").map((t)=>({Id:String(t.Id),Name:String(t.Name),Comment:t.Comment?String(t.Comment):void 0}))}async createPublicKey(e){if(!/^[A-Za-z0-9_-]{1,128}$/.test(e.name))throw TypeError("CloudFront public key name is invalid");if(!e.encodedKey.includes("BEGIN PUBLIC KEY"))throw TypeError("CloudFront public key must be PEM encoded");let i=(o)=>o.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;"),t=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/public-key",headers:{"Content-Type":"application/xml"},body:`<PublicKeyConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/"><CallerReference>${i(e.callerReference??`${Date.now()}-${e.name}`)}</CallerReference><Name>${i(e.name)}</Name><EncodedKey>${i(e.encodedKey)}</EncodedKey><Comment>${i(e.comment??"")}</Comment></PublicKeyConfig>`}),r=t.PublicKey??t;return{Id:String(r.Id),Name:String(r.PublicKeyConfig?.Name??e.name),EncodedKey:String(r.PublicKeyConfig?.EncodedKey??e.encodedKey),Comment:String(r.PublicKeyConfig?.Comment??e.comment??"")}}async listKeyGroups(){let e=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:"/2020-05-31/key-group"});return this.collectionItems(e.KeyGroupList??e,"KeyGroupSummary").map((t)=>({Id:String(t.KeyGroup?.Id??t.Id),Name:String(t.KeyGroup?.KeyGroupConfig?.Name??t.KeyGroupConfig?.Name??t.Name),Items:this.collectionItems(t.KeyGroup?.KeyGroupConfig?.Items??t.KeyGroupConfig?.Items??t.Items,"Item").map(String),Comment:t.KeyGroup?.KeyGroupConfig?.Comment??t.KeyGroupConfig?.Comment??t.Comment}))}async createKeyGroup(e){if(!/^[A-Za-z0-9_-]{1,128}$/.test(e.name))throw TypeError("CloudFront key group name is invalid");let i=[...new Set(e.publicKeyIds)];if(i.length===0)throw TypeError("CloudFront key group requires at least one public key");let t=(a)=>a.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;"),r=i.map((a)=>`<Item>${t(a)}</Item>`).join(""),o=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/key-group",headers:{"Content-Type":"application/xml"},body:`<KeyGroupConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/"><Name>${t(e.name)}</Name><Items>${r}</Items><Comment>${t(e.comment??"")}</Comment></KeyGroupConfig>`}),s=o.KeyGroup??o;return{Id:String(s.Id),Name:String(s.KeyGroupConfig?.Name??e.name),Items:i,Comment:String(s.KeyGroupConfig?.Comment??e.comment??"")}}static getS3BucketPolicyForCloudFront(e,i){return{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:`arn:aws:s3:::${e}/*`,Condition:{StringEquals:{"AWS:SourceArn":i}}}]}}async waitForDistributionDeployed(e,i=60){for(let t=0;t<i;t++){if((await this.getDistribution(e)).Status==="Deployed")return!0;await new Promise((o)=>setTimeout(o,30000))}return!1}async disableDistribution(e){let i=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),t=i.headers?.etag||i.headers?.ETag||"",r=i.body?.DistributionConfig||(i.body?.Enabled!==void 0?i.body:void 0)||i.DistributionConfig;if(!r||r.Enabled===void 0)throw Error("Failed to get current distribution config");r.Enabled=!1;let o=this.buildDistributionConfigXml(r),s=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:o,headers:{"Content-Type":"application/xml","If-Match":t},returnHeaders:!0});return{ETag:s.headers?.etag||s.headers?.ETag||s.ETag||""}}async deleteDistribution(e,i){let t=i||"";if(!t){let r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}`,returnHeaders:!0});t=r.headers?.etag||r.headers?.ETag||""}await this.client.request({service:"cloudfront",region:"us-east-1",method:"DELETE",path:`/2020-05-31/distribution/${e}`,headers:{"If-Match":t}})}async waitForDistributionDisabled(e,i=60){for(let t=0;t<i;t++){let r=await this.getDistribution(e);if(r.Status==="Deployed"&&!r.Enabled)return!0;await new Promise((o)=>setTimeout(o,30000))}return!1}async removeAlias(e,i){let t=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),r=t.headers?.etag||t.headers?.ETag||"",o=t.body?.DistributionConfig||(t.body?.Enabled!==void 0?t.body:void 0)||t.DistributionConfig;if(!o||o.Enabled===void 0)throw Error("Failed to get current distribution config");let s=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))s=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let u=o.Aliases.Items.CNAME;if(typeof u==="string")s=[u];else if(Array.isArray(u))s=u}}if(s.length===0)throw Error("Distribution has no aliases to remove");let a=s.filter((u)=>u!==i);if(a.length===s.length)throw Error(`Alias ${i} not found in distribution`);if(o.Aliases.Quantity=a.length,o.Aliases.Items=a.length>0?a:void 0,a.length===0)o.ViewerCertificate={CloudFrontDefaultCertificate:!0,MinimumProtocolVersion:"TLSv1.2_2021"};let c=this.buildDistributionConfigXml(o),g=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:c,headers:{"Content-Type":"application/xml","If-Match":r},returnHeaders:!0});return{ETag:g.headers?.etag||g.headers?.ETag||g.ETag||""}}}
+</DistributionConfig>`,b=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/distribution",body:A,headers:{"Content-Type":"application/xml"},returnHeaders:!0}),T=b.body?.Distribution||b.Distribution||b.body||b;return{Id:T.Id,ARN:T.ARN,DomainName:T.DomainName,Status:T.Status,ETag:b.headers?.etag||b.ETag||""}}async createMediaDistributionForS3(e){return this.createDistributionForS3({...e,defaultRootObject:"",mediaDelivery:!0,comment:e.comment??`Media distribution for ${e.bucketName}`})}async listPublicKeys(){let e=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:"/2020-05-31/public-key"});return this.collectionItems(e.PublicKeyList??e,"PublicKeySummary").map((t)=>({Id:String(t.Id),Name:String(t.Name),Comment:t.Comment?String(t.Comment):void 0}))}async createPublicKey(e){if(!/^[A-Za-z0-9_-]{1,128}$/.test(e.name))throw TypeError("CloudFront public key name is invalid");if(!e.encodedKey.includes("BEGIN PUBLIC KEY"))throw TypeError("CloudFront public key must be PEM encoded");let i=(o)=>o.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;"),t=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/public-key",headers:{"Content-Type":"application/xml"},body:`<PublicKeyConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/"><CallerReference>${i(e.callerReference??`${Date.now()}-${e.name}`)}</CallerReference><Name>${i(e.name)}</Name><EncodedKey>${i(e.encodedKey)}</EncodedKey><Comment>${i(e.comment??"")}</Comment></PublicKeyConfig>`}),r=t.PublicKey??t;return{Id:String(r.Id),Name:String(r.PublicKeyConfig?.Name??e.name),EncodedKey:String(r.PublicKeyConfig?.EncodedKey??e.encodedKey),Comment:String(r.PublicKeyConfig?.Comment??e.comment??"")}}async listKeyGroups(){let e=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:"/2020-05-31/key-group"});return this.collectionItems(e.KeyGroupList??e,"KeyGroupSummary").map((t)=>({Id:String(t.KeyGroup?.Id??t.Id),Name:String(t.KeyGroup?.KeyGroupConfig?.Name??t.KeyGroupConfig?.Name??t.Name),Items:this.collectionItems(t.KeyGroup?.KeyGroupConfig?.Items??t.KeyGroupConfig?.Items??t.Items,"Item").map(String),Comment:t.KeyGroup?.KeyGroupConfig?.Comment??t.KeyGroupConfig?.Comment??t.Comment}))}async createKeyGroup(e){if(!/^[A-Za-z0-9_-]{1,128}$/.test(e.name))throw TypeError("CloudFront key group name is invalid");let i=[...new Set(e.publicKeyIds)];if(i.length===0)throw TypeError("CloudFront key group requires at least one public key");let t=(a)=>a.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;"),r=i.map((a)=>`<Item>${t(a)}</Item>`).join(""),o=await this.client.request({service:"cloudfront",region:"us-east-1",method:"POST",path:"/2020-05-31/key-group",headers:{"Content-Type":"application/xml"},body:`<KeyGroupConfig xmlns="http://cloudfront.amazonaws.com/doc/2020-05-31/"><Name>${t(e.name)}</Name><Items>${r}</Items><Comment>${t(e.comment??"")}</Comment></KeyGroupConfig>`}),s=o.KeyGroup??o;return{Id:String(s.Id),Name:String(s.KeyGroupConfig?.Name??e.name),Items:i,Comment:String(s.KeyGroupConfig?.Comment??e.comment??"")}}static getS3BucketPolicyForCloudFront(e,i){return{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:`arn:aws:s3:::${e}/*`,Condition:{StringEquals:{"AWS:SourceArn":i}}}]}}async waitForDistributionDeployed(e,i=60){for(let t=0;t<i;t++){if((await this.getDistribution(e)).Status==="Deployed")return!0;await new Promise((o)=>setTimeout(o,30000))}return!1}async disableDistribution(e){let i=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),t=i.headers?.etag||i.headers?.ETag||"",r=i.body?.DistributionConfig||(i.body?.Enabled!==void 0?i.body:void 0)||i.DistributionConfig;if(!r||r.Enabled===void 0)throw Error("Failed to get current distribution config");r.Enabled=!1;let o=this.buildDistributionConfigXml(r),s=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:o,headers:{"Content-Type":"application/xml","If-Match":t},returnHeaders:!0});return{ETag:s.headers?.etag||s.headers?.ETag||s.ETag||""}}async deleteDistribution(e,i){let t=i||"";if(!t){let r=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}`,returnHeaders:!0});t=r.headers?.etag||r.headers?.ETag||""}await this.client.request({service:"cloudfront",region:"us-east-1",method:"DELETE",path:`/2020-05-31/distribution/${e}`,headers:{"If-Match":t}})}async waitForDistributionDisabled(e,i=60){for(let t=0;t<i;t++){let r=await this.getDistribution(e);if(r.Status==="Deployed"&&!r.Enabled)return!0;await new Promise((o)=>setTimeout(o,30000))}return!1}async removeAlias(e,i){let t=await this.client.request({service:"cloudfront",region:"us-east-1",method:"GET",path:`/2020-05-31/distribution/${e}/config`,returnHeaders:!0}),r=t.headers?.etag||t.headers?.ETag||"",o=t.body?.DistributionConfig||(t.body?.Enabled!==void 0?t.body:void 0)||t.DistributionConfig;if(!o||o.Enabled===void 0)throw Error("Failed to get current distribution config");let s=[];if(o.Aliases?.Items){if(Array.isArray(o.Aliases.Items))s=o.Aliases.Items;else if(typeof o.Aliases.Items==="object"){let u=o.Aliases.Items.CNAME;if(typeof u==="string")s=[u];else if(Array.isArray(u))s=u}}if(s.length===0)throw Error("Distribution has no aliases to remove");let a=s.filter((u)=>u!==i);if(a.length===s.length)throw Error(`Alias ${i} not found in distribution`);if(o.Aliases.Quantity=a.length,o.Aliases.Items=a.length>0?a:void 0,a.length===0)o.ViewerCertificate={CloudFrontDefaultCertificate:!0,MinimumProtocolVersion:"TLSv1.2_2021"};let c=this.buildDistributionConfigXml(o),g=await this.client.request({service:"cloudfront",region:"us-east-1",method:"PUT",path:`/2020-05-31/distribution/${e}/config`,body:c,headers:{"Content-Type":"application/xml","If-Match":r},returnHeaders:!0});return{ETag:g.headers?.etag||g.headers?.ETag||g.ETag||""}}}
 export{y};

package/dist/{chunk-r1730x8g.js → chunk-mte9da2p.js}

@@ -1,4 +1,4 @@
-import{W,de,R,le,pr}from"./chunk-setpnrtg.js";import{o}from"./chunk-2nma0bd8.js";import{y}from"./chunk-jwx5t3vf.js";import{S}from"./chunk-5db32a4x.js";import{f}from"./chunk-08tswmb3.js";function $a(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:a="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:v=3008,computeOriginId:x="app-compute",retainOnStackDelete:M=!1}=t,k=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],T=N?["GET","HEAD"]:["GET","HEAD"],E={},B={};E.S3Bucket={Type:"AWS::S3::Bucket",...k,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:a}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},E.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...k,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",E[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+import{W,de,R,le,pr}from"./chunk-setpnrtg.js";import{o}from"./chunk-2nma0bd8.js";import{y}from"./chunk-mdqnpbbc.js";import{S}from"./chunk-5db32a4x.js";import{f}from"./chunk-08tswmb3.js";function $a(t){let{bucketName:s,domain:u,aliases:e,certificateArn:p,defaultRootObject:i="index.html",errorDocument:a="404.html",passthroughUrls:c=!1,singlePageApp:g=!1,dynamicApp:C=!1,computeOriginDomain:w,computeOriginPort:v=3008,computeOriginId:x="app-compute",retainOnStackDelete:M=!1}=t,k=M?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},N=C&&!!w,j=N?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],T=N?["GET","HEAD"]:["GET","HEAD"],E={},B={};E.S3Bucket={Type:"AWS::S3::Bucket",...k,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:a}}},B.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},B.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},E.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...k,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let I;if(c&&N)I="InstallRootRedirectFunction",E[I]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   var request = event.request;
   if (request.uri === '/' || request.uri === '') {
     return {
@@ -42,7 +42,7 @@ import{W,de,R,le,pr}from"./chunk-setpnrtg.js";import{o}from"./chunk-2nma0bd8.js"
 │                                                                             │
 │  Verification typically takes 1-2 business days.                            │
 │  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${n.message}`}}let d=(await a.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],D=(n)=>d.find((r)=>r.OutputKey===n)?.OutputValue,A=D("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await q(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:D("BucketName")||N,distributionId:D("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function q(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof W){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let a=`www.${s}`;console.log(`Creating Route53 alias record for ${a} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:a,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${a} -> ${u}`);else console.log(`Created Route53 alias record: ${a} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let a=`www.${s}`;console.log(`Creating CNAME record for ${a} -> ${u}`);let c=await t.upsertRecord(s,{name:a,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${a} -> ${u}`);else console.log(`Created CNAME record: ${a} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function hn(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await mn(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new o(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:a}=await import("./chunk-kmwnzw91.js"),c=await a({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,v)=>{e?.("upload",`${C}/${w}: ${v}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-kmwnzw91.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function is(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:a="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:a}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:B,stackName:i,bucket:N,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:B,stackName:i,bucket:N,message:`Stack deployment failed: ${n.message}`}}let d=(await a.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],D=(n)=>d.find((r)=>r.OutputKey===n)?.OutputValue,A=D("DistributionDomain");if(A&&g)console.log(`Creating DNS records via ${g.name}...`),await q(g,e,A);else if(A&&!g)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:B,stackName:i,bucket:D("BucketName")||N,distributionId:D("DistributionId"),distributionDomain:A,domain:e,certificateArn:C,message:"Static site infrastructure deployed successfully with external DNS"}}async function q(t,s,u){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof W){console.log(`Creating Route53 alias record for apex domain ${s} -> ${u}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:u});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created Route53 alias record: ${s} -> ${u}`);let a=`www.${s}`;console.log(`Creating Route53 alias record for ${a} -> ${u}`);let c=await t.createCloudFrontAlias({domain:s,name:a,cloudFrontDomainName:u});if(!c.success)console.warn(`Warning: Could not create www Route53 alias: ${c.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${a} -> ${u}`);else console.log(`Created Route53 alias record: ${a} -> ${u}`)}else{try{let g=await t.listRecords(s,"A");if(g.success)for(let C of g.records){let w=C.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${C.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:C.content})}}catch(g){console.log(`Note: Could not check for conflicting A records: ${g instanceof Error?g.message:g}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created ALIAS record: ${s} -> ${u}`);let a=`www.${s}`;console.log(`Creating CNAME record for ${a} -> ${u}`);let c=await t.upsertRecord(s,{name:a,type:"CNAME",content:u,ttl:600});if(!c.success)console.warn(`Warning: Could not create www DNS record: ${c.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${a} -> ${u}`);else console.log(`Created CNAME record: ${a} -> ${u}`)}else{console.log(`Creating CNAME record for ${s} -> ${u}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:u,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${u}`);else console.log(`Created CNAME record: ${s} -> ${u}`)}}async function hn(t){let{sourceDir:s,cleanBucket:u=!1,onProgress:e,...p}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await mn(p);if(!i.success)return i;if(u){e?.("clean","Cleaning old files from S3...");try{await new o(p.region||"us-east-1").emptyBucket(i.bucket)}catch(C){console.log(`Note: Could not clean bucket: ${C.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:a}=await import("./chunk-nkd35khb.js"),c=await a({sourceDir:s,bucket:i.bucket,region:p.region||"us-east-1",cacheControl:p.cacheControl,onProgress:(C,w,v)=>{e?.("upload",`${C}/${w}: ${v}`)}});if(c.errors.length>0)return{...i,success:!1,message:`Upload errors: ${c.errors.join(", ")}`,filesUploaded:c.uploaded};if(i.distributionId&&c.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:C}=await import("./chunk-nkd35khb.js");await C(i.distributionId)}e?.("complete","Deployment complete!");let g=c.skipped>0?`Deployed ${c.uploaded} files (${c.skipped} unchanged) with external DNS`:`Deployed ${c.uploaded} files successfully with external DNS`;return{...i,filesUploaded:c.uploaded,filesSkipped:c.skipped,message:g}}function is(t){let{bucketName:s,domain:u,certificateArn:e,hostedZoneId:p,defaultRootObject:i="index.html",errorDocument:a="404.html"}=t,c={},g={};c.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:a}}},g.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},g.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},c.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},c.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   const request = event.request;
   var uri = request.uri;
 

package/dist/{chunk-kmwnzw91.js → chunk-nkd35khb.js}

@@ -1 +1 @@
-import{is,ss,os,as,Ma,Fa}from"./chunk-r1730x8g.js";import"./chunk-jwx5t3vf.js";import"./chunk-setpnrtg.js";import"./chunk-5db32a4x.js";import"./chunk-08tswmb3.js";import"./chunk-2nma0bd8.js";import"./chunk-wrpnnrdf.js";export{Ma as deleteStaticSite,ss as deployStaticSite,Fa as deployStaticSiteFull,is as generateStaticSiteTemplate,as as invalidateCache,os as uploadStaticFiles};
+import{is,ss,os,as,Ma,Fa}from"./chunk-mte9da2p.js";import"./chunk-mdqnpbbc.js";import"./chunk-setpnrtg.js";import"./chunk-5db32a4x.js";import"./chunk-08tswmb3.js";import"./chunk-2nma0bd8.js";import"./chunk-wrpnnrdf.js";export{Ma as deleteStaticSite,ss as deployStaticSite,Fa as deployStaticSiteFull,is as generateStaticSiteTemplate,as as invalidateCache,os as uploadStaticFiles};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{an,cn,Xl,Xi,Yl,Zl,eu,Sa,tu,ru,mh,nu,E,iu,Yi,_e,su,ou,by,au,cu,du,lu,uu,hh,vy,Ty,wy,fh,Ah,Ry,Dy,yh,Ih,Py,Zi,tr,Ca,dn,ln,rr,et,vt,es,Sh,un,pu,gu,Ea,rs,gn,ns,La}from"../chunk-826gp2kd.js";import{$a,mn,hn,is,ss,os,as,Ma,Fa}from"../chunk-r1730x8g.js";import{Ua}from"../chunk-e44ajkha.js";import"../chunk-0p7ddjt6.js";import"../chunk-3zv0e36t.js";import"../chunk-jwx5t3vf.js";import"../chunk-dm6kyz6e.js";import"../chunk-tvwrthfq.js";import"../chunk-setpnrtg.js";import"../chunk-5db32a4x.js";import{Nu,rc,Ce,nc,Pn,ku,ic,Rc,xs,Dc,Ot,si,Os}from"../chunk-7p1653g6.js";import"../chunk-x9bpm5s1.js";import"../chunk-08tswmb3.js";import"../chunk-2nma0bd8.js";import"../chunk-wrpnnrdf.js";import{ut,Rf,Oc,ui,pi,gi,Op}from"../chunk-b10n1xy5.js";import{x,Dr,Pr,Lc,Ms,u,Df,Lp,$p,oI,aI}from"../chunk-q0g0rjn3.js";import"../chunk-49p5cx21.js";import"../chunk-w23wrsa4.js";export{Rf as DEFAULT_SITE_PORT_RANGE,ut as HOST_SITES_DIR,nc as IPV6_EXCLUDED_HOST_LABELS,Rc as MANAGEMENT_DASHBOARD_SITE,an as addSiteToCloudConfig,Op as allocateSitePorts,Py as buildAndPushContainerImage,Ua as buildAndPushServerlessImage,tr as buildFunctionEnv,pi as buildHostSitePortsScript,Os as buildManagementDashboardArtifact,vt as buildServerTopology,es as buildServerlessTopology,Sh as buildTopology,Ea as collectEgressMetrics,Nu as collectServerDnsDomains,Ih as createContainerImageDependencies,fh as createExistingStaticFullStackDependencies,hh as createStaticApiOriginDependencies,gn as dashboardActions,xs as dashboardCredentialsFile,su as dashboardPageRoutes,lu as deleteFailoverReplicaBuckets,Ma as deleteStaticSite,Ry as deployExistingStaticFullStack,Ca as deployServerlessApp,aI as deployShipsFiles,uu as deploySite,vy as deployStaticApiOrigin,ss as deployStaticSite,Fa as deployStaticSiteFull,mn as deployStaticSiteWithExternalDns,hn as deployStaticSiteWithExternalDnsFull,pu as egressReportMetrics,E as ensureDashboardActor,au as ensureFailoverReplicaBuckets,si as ensureManagementDashboard,Dy as estimateExistingStaticFullStackMonthlyCost,wy as estimateStaticApiOriginMonthlyCost,gu as fetchEgressReport,Ah as generateExistingStaticFullStackTemplate,$a as generateExternalDnsStaticSiteTemplate,is as generateStaticSiteTemplate,cu as grantFailoverReplicaAccess,Df as hasComputeConfigured,Lc as hasProxyUpstream,yh as hashContainerContext,Pn as hostAcceptsIpv6,Zi as infraEnvFromOutputs,iu as initializeDashboardControlPlane,as as invalidateCache,Dr as isPhpSite,Sa as isValidHostname,Ce as normalizePublicIpv6,ui as occupiedHostPorts,gi as parseHostSiteFragments,Oc as parseUpstreamPort,ku as reconcileAddressRecords,dn as redeployServerlessApp,cn as removeSiteFromCloudConfig,rc as removeStaleServerAddressRecords,tu as renderAliasesValue,eu as renderEnvValue,ru as renderRedirectsValue,mh as renderSiteSnippet,Yl as renderSslValue,Zl as renderStringValue,ns as resolveDashboardAction,Dc as resolveDashboardAuth,un as resolveDashboardData,ou as resolveLegacyDashboardRoute,Pr as resolveProxyUpstreams,Ms as resolveSiteDeployTarget,u as resolveSiteKind,Ot as resolveUiSource,ln as rollbackServerlessApp,by as routesForDashboard,et as runRemoteCommand,rs as sanitizeCloudConfig,du as seedFailoverReplicas,nu as setAttachToInCloudConfig,rr as setMaintenance,Xi as setSitePropertyInCloudConfig,$p as shipsARelease,oI as shipsToBucket,x as siteInstallBase,La as startLocalDashboardServer,Yi as synchronizeDashboardUsers,_e as trackDashboardOperation,Xl as updateSiteInCloudConfig,os as uploadStaticFiles,Lp as validateDeploymentConfig,ic as verifyAddressRecord,Ty as verifyStaticApiOrigin};
+import{an,cn,Xl,Xi,Yl,Zl,eu,Sa,tu,ru,mh,nu,E,iu,Yi,_e,su,ou,by,au,cu,du,lu,uu,hh,vy,Ty,wy,fh,Ah,Ry,Dy,yh,Ih,Py,Zi,tr,Ca,dn,ln,rr,et,vt,es,Sh,un,pu,gu,Ea,rs,gn,ns,La}from"../chunk-k75jv8s6.js";import{$a,mn,hn,is,ss,os,as,Ma,Fa}from"../chunk-mte9da2p.js";import{Ua}from"../chunk-e44ajkha.js";import"../chunk-0p7ddjt6.js";import"../chunk-3zv0e36t.js";import"../chunk-mdqnpbbc.js";import"../chunk-dm6kyz6e.js";import"../chunk-tvwrthfq.js";import"../chunk-setpnrtg.js";import"../chunk-5db32a4x.js";import{Nu,rc,Ce,nc,Pn,ku,ic,Rc,xs,Dc,Ot,si,Os}from"../chunk-7p1653g6.js";import"../chunk-x9bpm5s1.js";import"../chunk-08tswmb3.js";import"../chunk-2nma0bd8.js";import"../chunk-wrpnnrdf.js";import{ut,Rf,Oc,ui,pi,gi,Op}from"../chunk-b10n1xy5.js";import{x,Dr,Pr,Lc,Ms,u,Df,Lp,$p,oI,aI}from"../chunk-q0g0rjn3.js";import"../chunk-49p5cx21.js";import"../chunk-w23wrsa4.js";export{Rf as DEFAULT_SITE_PORT_RANGE,ut as HOST_SITES_DIR,nc as IPV6_EXCLUDED_HOST_LABELS,Rc as MANAGEMENT_DASHBOARD_SITE,an as addSiteToCloudConfig,Op as allocateSitePorts,Py as buildAndPushContainerImage,Ua as buildAndPushServerlessImage,tr as buildFunctionEnv,pi as buildHostSitePortsScript,Os as buildManagementDashboardArtifact,vt as buildServerTopology,es as buildServerlessTopology,Sh as buildTopology,Ea as collectEgressMetrics,Nu as collectServerDnsDomains,Ih as createContainerImageDependencies,fh as createExistingStaticFullStackDependencies,hh as createStaticApiOriginDependencies,gn as dashboardActions,xs as dashboardCredentialsFile,su as dashboardPageRoutes,lu as deleteFailoverReplicaBuckets,Ma as deleteStaticSite,Ry as deployExistingStaticFullStack,Ca as deployServerlessApp,aI as deployShipsFiles,uu as deploySite,vy as deployStaticApiOrigin,ss as deployStaticSite,Fa as deployStaticSiteFull,mn as deployStaticSiteWithExternalDns,hn as deployStaticSiteWithExternalDnsFull,pu as egressReportMetrics,E as ensureDashboardActor,au as ensureFailoverReplicaBuckets,si as ensureManagementDashboard,Dy as estimateExistingStaticFullStackMonthlyCost,wy as estimateStaticApiOriginMonthlyCost,gu as fetchEgressReport,Ah as generateExistingStaticFullStackTemplate,$a as generateExternalDnsStaticSiteTemplate,is as generateStaticSiteTemplate,cu as grantFailoverReplicaAccess,Df as hasComputeConfigured,Lc as hasProxyUpstream,yh as hashContainerContext,Pn as hostAcceptsIpv6,Zi as infraEnvFromOutputs,iu as initializeDashboardControlPlane,as as invalidateCache,Dr as isPhpSite,Sa as isValidHostname,Ce as normalizePublicIpv6,ui as occupiedHostPorts,gi as parseHostSiteFragments,Oc as parseUpstreamPort,ku as reconcileAddressRecords,dn as redeployServerlessApp,cn as removeSiteFromCloudConfig,rc as removeStaleServerAddressRecords,tu as renderAliasesValue,eu as renderEnvValue,ru as renderRedirectsValue,mh as renderSiteSnippet,Yl as renderSslValue,Zl as renderStringValue,ns as resolveDashboardAction,Dc as resolveDashboardAuth,un as resolveDashboardData,ou as resolveLegacyDashboardRoute,Pr as resolveProxyUpstreams,Ms as resolveSiteDeployTarget,u as resolveSiteKind,Ot as resolveUiSource,ln as rollbackServerlessApp,by as routesForDashboard,et as runRemoteCommand,rs as sanitizeCloudConfig,du as seedFailoverReplicas,nu as setAttachToInCloudConfig,rr as setMaintenance,Xi as setSitePropertyInCloudConfig,$p as shipsARelease,oI as shipsToBucket,x as siteInstallBase,La as startLocalDashboardServer,Yi as synchronizeDashboardUsers,_e as trackDashboardOperation,Xl as updateSiteInCloudConfig,os as uploadStaticFiles,Lp as validateDeploymentConfig,ic as verifyAddressRecord,Ty as verifyStaticApiOrigin};

package/dist/index.d.ts

@@ -28,7 +28,7 @@ export { validateTemplate, validateTemplateSize, validateResourceLimits } from '
 export type { ValidationError as TemplateValidationError, ValidationResult as TemplateValidationResult, } from './validation';
 export { AWSClient, CloudFormationClient, CloudFormationClient as AWSCloudFormationClient, CloudFrontClient, CloudFrontClient as AWSCloudFrontClient, EC2Client, S3Client, Route53Client, Route53DomainsClient, ACMClient, ACMDnsValidator, ECRClient, ECSClient, STSClient, SSMClient, SecretsManagerClient, SESClient, EmailClient, SNSClient, SQSClient, LambdaClient, CloudWatchLogsClient, ConnectClient, ELBv2Client, RDSClient, DynamoDBClient, OpenSearchClient, TranscribeClient, BedrockClient, BedrockRuntimeClient, ComprehendClient, RekognitionClient, TextractClient, PollyClient, TranslateClient, PersonalizeClient, KendraClient, EventBridgeClient, ElastiCacheClient, SchedulerClient, IAMClient, ApplicationAutoScalingClient, SmsClient, VoiceClient, SupportClient, EFSClient, setupSmsInfrastructure, getSmsInfrastructureStatus, createSmsInfrastructure, SmsVoiceClient, } from './aws';
 export type { SmsSetupConfig, SmsSetupResult, OriginationPhoneNumber, DescribePhoneNumbersParams, DescribePhoneNumbersResult, SandboxPhone, AddSandboxPhoneResult, VerifySandboxPhoneResult, } from './aws';
-export type { AWSRequestOptions, AWSClientConfig, AWSError, AWSCredentials as AWSClientCredentials, StackParameter, StackTag, CreateStackOptions, UpdateStackOptions, DescribeStacksOptions, StackEvent, Stack, InvalidationOptions, Distribution, S3SyncOptions, S3CopyOptions, S3ListOptions, S3Object, CertificateDetail, Certificate as ELBv2Certificate, RekognitionS3Object, RekognitionBoundingBox, TextractS3Object, TextractBoundingBox, CountryCode, ContactType, ContactDetail, KendraCreateDataSourceCommandInput, KendraCreateDataSourceCommandOutput, KendraListDataSourcesCommandInput, KendraListDataSourcesCommandOutput, InvokeModelCommandInput, InvokeModelCommandOutput, InvokeModelWithResponseStreamCommandInput, InvokeModelWithResponseStreamCommandOutput, CreateModelCustomizationJobCommandInput, CreateModelCustomizationJobCommandOutput, GetModelCustomizationJobCommandInput, GetModelCustomizationJobCommandOutput, ListFoundationModelsCommandInput, ListFoundationModelsCommandOutput, AttributeValue as DynamoDBAttributeValue, KeySchemaElement, AttributeDefinition as DynamoDBAttributeDefinition, } from './aws';
+export type { AWSRequestOptions, AWSClientConfig, AWSError, AWSCredentials as AWSClientCredentials, StackParameter, StackTag, CreateStackOptions, UpdateStackOptions, DescribeStacksOptions, StackEvent, Stack, InvalidationOptions, Distribution, CloudFrontItems, RawCacheBehavior, RawDistributionConfig, RawOrigin, XmlList, S3SyncOptions, S3CopyOptions, S3ListOptions, S3Object, CertificateDetail, Certificate as ELBv2Certificate, RekognitionS3Object, RekognitionBoundingBox, TextractS3Object, TextractBoundingBox, CountryCode, ContactType, ContactDetail, KendraCreateDataSourceCommandInput, KendraCreateDataSourceCommandOutput, KendraListDataSourcesCommandInput, KendraListDataSourcesCommandOutput, InvokeModelCommandInput, InvokeModelCommandOutput, InvokeModelWithResponseStreamCommandInput, InvokeModelWithResponseStreamCommandOutput, CreateModelCustomizationJobCommandInput, CreateModelCustomizationJobCommandOutput, GetModelCustomizationJobCommandInput, GetModelCustomizationJobCommandOutput, ListFoundationModelsCommandInput, ListFoundationModelsCommandOutput, AttributeValue as DynamoDBAttributeValue, KeySchemaElement, AttributeDefinition as DynamoDBAttributeDefinition, } from './aws';
 export { createObjectStorageClient, providerEndpoint, resolveObjectStorage } from './object-storage';
 export type { ObjectStorageConfig, ObjectStorageCredentials, ObjectStorageProvider, ResolvedObjectStorage, } from './object-storage';
 export { keyMatchesFilters, migrateObjectStorage, remapKey } from './object-storage/migrate';

package/dist/index.js

@@ -1,4 +1,4 @@
-import{cg,O,dg,nA,pI,iA,gI,mI,hI,fI,yI,II,SI,CI,EI,bI,lg,ug,Cd,Ed,lo,L,d,bd,pg,M,vd,p,sA,Di,Td,wd,ge,Rd,vI,r,t,TI,wI,g,RI,DI,PI,NI,kI,Gt,Dd,uo,oA,BI,_I,Re,je,Pd,gg,mg,xI,hg,fg,Ag,Nd,yg,De,Gr,qt,kd,Vt,me,aA,Bd,po,Ig,Sg,Cg,Eg,_d,OI,F,C,a,A,ze,m,cA,Ke,U,ft,LI,dA,Q,xd,Pe,jt,go,ee,Od,te,lA,mo,H,G,N,Pi,T,zt,At,q,e,ho,$I,bg,Ld,MI,FI,UI,QI,$d,HI,GI,qI,VI,jI,zI,KI,WI,JI,XI,YI,ZI,uA,pA,gA,mA,hA,fA,AA,Kt,vg,Tg,qr,Ni,eS,wg,tS,rS,Vr,nS,iS,sS,oS,aS,cS,yA,IA,SA,CA,EA,fo,dS,bA,vA,TA,V,lS,We,Ao,Wt,wA,Rg,RA,DA,PA,Dg,re,uS,pS,gS,mS,NA,hS,j,fS,AS,yS,Pg,Ng,IS,kg,Bg,SS,CS,ES,bS,vS,kA,Md,TS,wS,RS,DS,PS,BA,_A,NS,kS,BS,_S,xS,OS,LS,$S,MS,_g,Fd,FS,US,QS,HS,xg,Og,Lg,GS,$g,qS,VS,jS,zS,Mg,KS,WS,JS,XS,YS,ZS,eC,tC,xA,OA,LA,$A,Fg,rC,nC,iC,sC,oC,aC,cC,dC,lC,MA,FA,UA,QA,uC,pC,Ug,gC,Qg,Hg,Gg,qg,mC,hC,fC,AC,Ne,ki,yC,IC,SC,CC,EC,bC,vC,TC,HA,wC,RC,Vg,jg,DC,PC,GA,NC,kC,BC,_C,xC,OC,LC,$C,MC,FC,UC,QC,HC,GC,qC,VC,jC,zC,KC,WC,JC,zg,XC,Kg,YC,Wg,ZC,Jg,eE,Xg,tE,jr,rE,Yg,nE,yo,iE,Zg,sE,em,oE,tm,aE,rm,cE,nm,dE,zr,lE,im,uE,sm,pE,om,gE,am,mE,cm,hE,dm,fE,lm,AE,um,yE,pm,IE,gm,SE,mm,CE,hm,EE,fm,bE,Am,vE,ym,TE,Im,wE,Sm,RE,Cm,DE,Em,PE,bm,NE,vm,kE,Tm,BE,wm,_E,Rm,xE,Dm,OE,qA,VA,jA,zA,Pm,LE,Nm,$E,km,ME,Bm,FE,Bi,KA,WA,Io,Ud,Kr,JA,So,Jt,Qd,Hd,XA,YA,_m,ZA,Gd,xm,UE,QE,Co,Eo,bo,qd,_i,Vd,jd,vo,zd,Kd,Om,ey,ty,ry,HE,ny,iy,GE,sy,Lm,oy,ay,cy,qE,dy,xi,Wd,ly,VE,uy,To,wo,Jd,$m,jE,Mm,zE,Fm,KE,Um,WE,Qm,JE}from"./chunk-w23wrsa4.js";import{Bo,Hm,nl,gy,Mi,il,_o,Gm,qm,Wr,xo,sl,Je,ol,al,cl,Fi,Jr,Vm,Xe,dl,Oo,Lo,$o,ll,ul,pl,Ui,Mo,gl,Xr,Qi,Fo,yt,jm,ml,hl,zm,fl,Uo,Xt,Al,yl,Il,Sl,Ye,Km,Cl,Yt,Qo,Ho,Go,Hi,Gi,Yr,El,qi,qo,Vo,Zr,bl,en,Wm,Jm,It,tn,jo,Xm,vl,Tl,zo,wl,Rl,Dl,my,ne,Pl,hy,fy,Vi,ji,Ay,he,Ym,St,ke,Be,Ct,Nl,kl,Bl,_l,Zm,eh,Ko,th,rh,Wo,xl,Ol,nh,ie,ih,Ll,fe,Jo,Ze,Et,bt,rn,zi,$l,yy,Xo,sh,oh,ah,ch,Yo,Zo,Ml,nn,ea,Fl,Ki,Ul,ta,ra,na,ia,sa,oa,aa,ca,Ql,Zt,da,Hl,sn,Gl,la,ua,ql,er,pa,ga,dh,Iy,Wi,Sy,Cy,Ey,ma,ha,Vl,lh,fa,on,jl,Ji,zl,Kl,Wl,Aa,uh,ya,Jl,ph,Ia,gh,an,cn,Xl,Xi,nu,au,cu,du,lu,uu,Zi,tr,Ca,dn,ln,rr,et,Ch,ba,Eh,bh,mu,va,ts,hu,Ta,Tt,xe,fu,wa,Ra,Au,Da,Pa,Na,ka,yu,Iu,pn,Ba,_a,xa,Oa,Su,rs,gn,ns,La}from"./chunk-826gp2kd.js";import{x,Pr,Lc,Ms,u,Lp,$p}from"./chunk-q0g0rjn3.js";import{ut,Oc,ui,pi,gi,Op}from"./chunk-b10n1xy5.js";import{rf,nf,sf,fp,Ap,yp,of,Ip,Sp,af,cf,Cp,df,lf,_c,Ep,uf,pf,bp,gf,mf,hf,ff,Af,yf,If,li,xc,vp,Tp,wp,Rp,Dp,Pp,Np,kp,Bp,_p,xp,Sf,Cf,Ef,bf,vf,Tf,wf}from"./chunk-98qx6m9h.js";import{Ge,$c,pe,Lt,Mc,D,$t,pt,Fc,Fs,Pf,Mp,Uc,s,mi,Us,Nr,Qc,Hc,kr,Nf,Gc,cI,dI,Qs,lI,uI,qc,Vc,hi,Hs,Z,c,Gs,qe,Br,kf,Bf,jc,Mt,_f,qs,xf,Of,Vs,zc,_r,js,Lf,Kc,Fp,Ft,xr,$f,zs,Mf,P,Ff,Wc,Up,Ks,Uf,Qf,Hf,Jc,fi,Ws,Xc,Ut,gt,Gf,Or,qf,Yc,Qp,Hp,Js,Zc,ed,mt,Gp,Ai,td,Xs,Lr,qp,yi,rd,nd,Ii,Vp,id,sd,od,ad,Ys,jp,zp,Vf,Kp,cd,Si,Wp,Jp,Zs,$r,eo,to,ro,dd,Xp,ld,no,jf,Qt,zf,ud,Mr,pd,Kf,gd,Yp,Ci,Fr,io,Ei,Ve,Wf,Zp,eg,Ht,md,hd,fd,bi,vi,Ti,Jf,Xf,ht,so,Yf,Ur,tg,oo,Zf,rg,ng,ig,eA,sg,og,tA,i,rA,wi,ao,co}from"./chunk-49p5cx21.js";import{n}from"./chunk-wrpnnrdf.js";import{Ie,it,vn}from"./chunk-3zv0e36t.js";import{o}from"./chunk-2nma0bd8.js";import{Ae,ls,us,bu,Qa,Ha,ps,Ga,tt,z,rt,se,b,ye,An,qa,Oe,Va,yn,In,Sn,wt,Rt,Dt,Cn,ir,ja,sr,or,nt,En,Ka,Pt,ar,bn,Ja,Ru,Du,Xa,cr}from"./chunk-0p7ddjt6.js";import{st,ce,$e,Pu,Tn,Ya,Za,ms,Se,Nt,wn,hs,fs,dr,lr,Rn,ur,As,ys,Is,Ss,W,Cs,Es,bs,vs,de,Ts,ws,Rs,R,ec,Dn,tc,le,pr}from"./chunk-setpnrtg.js";import{K}from"./chunk-tvwrthfq.js";import{Nu,rc,Ce,nc,Pn,ku,ic,Bu,_u,Oh,kn,Ps,Bn,_n,xn,J,Me,B,Ar,Ln,yr,ue,ac,$n,cc,Sr,Un,Ns,Qn,Hn,Gn,qn,Cr,gc,Fe,X,Ue,Qe,at,ve,Er,Te,zn,Kn,Wn,Jn,Xn,Yn,Zn,br,_,_s,ip,Sc,ti,ri,ni,ii,Rc,xs,Dc,Ot,si,Os,Ls,Pc,oi,Nc}from"./chunk-7p1653g6.js";import{Xd,Ro,Oi,Li,Do,Yd,Zd,$i,Po,No,tl,rl,ko}from"./chunk-gvybjt7y.js";import{$a,mn,hn,is,ss,os,as,Ma,Fa}from"./chunk-r1730x8g.js";import{Ua}from"./chunk-e44ajkha.js";import{y}from"./chunk-jwx5t3vf.js";import{Le}from"./chunk-dm6kyz6e.js";import{S}from"./chunk-5db32a4x.js";import{Y,ai,$s,kc,ci,hp}from"./chunk-qfqh21rq.js";import{Tr,we}from"./chunk-x9bpm5s1.js";import{f}from"./chunk-08tswmb3.js";import{Zh,He}from"./chunk-6e5j40n9.js";import{Ad,Qr,yd,Id,Sd,Ri,ag,Hr}from"./chunk-h85wqdvr.js";import{createHmac as sc,createSign as vc,timingSafeEqual as Ec}from"node:crypto";function Mn(l){let h=l instanceof Date?l.getTime():l;if(!Number.isFinite(h))throw TypeError("Media access timestamp must be finite");return Math.floor(h/1000)}function lc(l){return Buffer.from(l).toString("base64").replaceAll("+","-").replaceAll("=","_").replaceAll("/","~")}function Bc(l){return Buffer.from(l).toString("base64url")}function dc(l,h=!1){if(!l||/[\r\n]/.test(l))throw TypeError("Media resource is invalid");let I=h?l.replaceAll("*","wildcard"):l,w=new URL(I);if(!["http:","https:"].includes(w.protocol))throw TypeError("Media resource must use HTTP or HTTPS");if(!h&&l.includes("*"))throw TypeError("Canned policies cannot contain wildcards")}function uc(l,h){let I=vc("RSA-SHA1");return I.update(l),I.end(),lc(I.sign(h))}function pc(l){dc(l.resource,!0);let I={DateLessThan:{"AWS:EpochTime":Mn(l.expiresAt)}};if(l.activeAt!==void 0)I.DateGreaterThan={"AWS:EpochTime":Mn(l.activeAt)};if(l.ipAddress)I.IpAddress={"AWS:SourceIp":l.ipAddress};return JSON.stringify({Statement:[{Resource:l.resource,Condition:I}]})}function Ku(l,h,I){dc(l);let w=Mn(h),v=l.includes("?")?"&":"?",Ee=pc({resource:l,expiresAt:h}),oe=uc(Ee,I.privateKey);return`${l}${v}Expires=${w}&Signature=${encodeURIComponent(oe)}&Key-Pair-Id=${encodeURIComponent(I.keyPairId)}`}function ju(l,h){let I=pc(l);return{"CloudFront-Key-Pair-Id":h.keyPairId,"CloudFront-Policy":lc(Buffer.from(I)),"CloudFront-Signature":uc(I,h.privateKey)}}function Zu(l){if(!l.resource||/[\r\n]/.test(l.resource))throw TypeError("Media resource is invalid");let h=Bc(Buffer.from(JSON.stringify({resource:l.resource,expiresAt:Mn(l.expiresAt),...l.keyId?{keyId:l.keyId}:{},...l.audience?{audience:l.audience}:{}}))),I=sc("sha256",l.secret).update(h).digest("base64url");return`${h}.${I}`}function qu(l,h){let[I,w,v]=l.split(".");if(!I||!w||v)return null;let Ee=sc("sha256",h.secret).update(I).digest(),oe;try{oe=Buffer.from(w,"base64url")}catch{return null}if(Ee.length!==oe.length||!Ec(Ee,oe))return null;try{let ae=JSON.parse(Buffer.from(I,"base64url").toString("utf8")),be=Mn(h.now??Date.now());if(!ae.resource||!Number.isSafeInteger(ae.expiresAt)||ae.expiresAt<=be)return null;if(h.resource&&ae.resource!==h.resource)return null;if(h.audience&&ae.audience!==h.audience)return null;return ae}catch{return null}}function Ju(l,h=!1){let I=new URL(l,"https://media.invalid").pathname.toLowerCase(),w=/\.(?:m3u8|mpd|vtt|json)$/.test(I),v=/\.(?:key|license)$/.test(I)||I.includes("/keys/")||I.includes("/licenses/");return{"Accept-Ranges":"bytes","Cache-Control":h&&(w||v)?"private, no-store":w?"public, max-age=5, s-maxage=30, stale-while-revalidate=30":"public, max-age=31536000, immutable","Cross-Origin-Resource-Policy":"cross-origin","X-Content-Type-Options":"nosniff"}}function Yu(l){if(!/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(l.bucket))throw TypeError("Media bucket is invalid");if(!/^[a-z0-9-]+$/.test(l.region))throw TypeError("Media bucket region is invalid");let h=l.prefix?`/${l.prefix.replace(/^\/+|\/+$/g,"")}`:"",I=l.protected??!1,w="public, max-age=31536000, immutable",v=I?"private, no-store":"public, max-age=5, s-maxage=30, stale-while-revalidate=30";return{originDomain:`${l.bucket}.s3.${l.region}.amazonaws.com`,originPath:h,domain:l.domain,trustedKeyGroupIds:[...new Set(l.trustedKeyGroupIds??[])],behaviors:[{pathPattern:"*.m3u8",cacheControl:v,compress:!0,signed:I},{pathPattern:"*.mpd",cacheControl:v,compress:!0,signed:I},{pathPattern:"*.vtt",cacheControl:v,compress:!0,signed:I},{pathPattern:"*",cacheControl:w,compress:!1,signed:I}],responseHeaders:{"Access-Control-Allow-Headers":"Range, If-Range","Access-Control-Allow-Methods":"GET, HEAD, OPTIONS","Access-Control-Allow-Origin":"*","Access-Control-Expose-Headers":"Accept-Ranges, Content-Length, Content-Range, ETag","X-Content-Type-Options":"nosniff"}}}class el{builder;config;environment;mergedConfig;serverEipLogicalIds=new Map;storageFailoverReplicas=[];constructor(l){this.config=l.config,this.environment=l.environment,this.builder=new Rd(`${this.config.project.name} - ${this.environment}`),this.mergedConfig=this.mergeEnvironmentConfig()}mergeEnvironmentConfig(){let h=this.config.environments[this.environment]?.infrastructure;if(!h)return this.config;return{...this.config,infrastructure:{...this.config.infrastructure,...h,compute:{...this.config.infrastructure?.compute,...h.compute},storage:{...this.config.infrastructure?.storage,...h.storage},functions:{...this.config.infrastructure?.functions,...h.functions},servers:{...this.config.infrastructure?.servers,...h.servers},databases:{...this.config.infrastructure?.databases,...h.databases},cdn:{...this.config.infrastructure?.cdn,...h.cdn},sftp:h.sftp??this.config.infrastructure?.sftp,queues:{...this.config.infrastructure?.queues,...h.queues},redirects:{...this.config.infrastructure?.redirects,...h.redirects},realtime:{...this.config.infrastructure?.realtime,...h.realtime},cache:{...this.config.infrastructure?.cache,...h.cache},fileSystem:{...this.config.infrastructure?.fileSystem,...h.fileSystem},email:{...this.config.infrastructure?.email,...h.email},search:{...this.config.infrastructure?.search,...h.search},ai:{...this.config.infrastructure?.ai,...h.ai}}}}shouldDeploy(l){if(l.environments&&!l.environments.includes(this.environment))return!1;if(l.requiresFeatures){let h=this.config.features||{};if(!l.requiresFeatures.every((w)=>h[w]===!0))return!1}if(l.regions){let h=this.config.environments[this.environment]?.region||this.config.project.region;if(!l.regions.includes(h))return!1}if(l.condition&&typeof l.condition==="function")return l.condition(this.config,this.environment);return!0}resolveApiOriginPort(){let l=this.mergedConfig.infrastructure?.api?.port??this.mergedConfig.ports?.api,h=Number(l||3008);return Number.isFinite(h)&&h>0?h:3008}defaultComputeCachePathPatterns(){return["/api/*","/auth/*","/publisher/api/*","/publisher/*","/publish","/publish/*","/analytics/*","/packages/*","/npm/*","/zig/*","/php/*","/commits/*","/health","/dashboard/*","/search","/login","/logout","/signup","/account","/account/*"]}shouldRouteStorageBucketToCompute(l,h){return l==="public"||h.routeCompute===!0}storageBucketName(l,h,I){return this.mergedConfig.infrastructure?.storage?.[I]?.bucket??`${l}-${h}-${I}`}fileSystemLogicalId(l,h,I){return t(r({slug:`${l}-${I}`,environment:h,resourceType:"efs"}))}resolveSftpStorage(l,h,I){let w=l.storage;if(w?.type==="efs"&&w.fileSystem){if(!this.mergedConfig.infrastructure?.fileSystem?.[w.fileSystem])throw Error(`sftp: storage.fileSystem "${w.fileSystem}" is not defined in infrastructure.fileSystem`);return{type:"efs",fileSystemId:{Ref:this.fileSystemLogicalId(h,I,w.fileSystem)},posixProfile:w.posixProfile}}if(w?.type==="s3"&&w.storageBucket){if(!this.mergedConfig.infrastructure?.storage?.[w.storageBucket])throw Error(`sftp: storage.storageBucket "${w.storageBucket}" is not defined in infrastructure.storage`);return{type:"s3",bucket:this.storageBucketName(h,I,w.storageBucket)}}return}resolveComputeCachePathPatterns(l){if(l&&l.length>0)return l;return this.defaultComputeCachePathPatterns()}createComputeCacheBehavior(l,h){return{PathPattern:l,TargetOriginId:h,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac"}}appendComputeAppOrigin(l,h,I,w,v,Ee){let oe=this.serverEipLogicalIds.get("app"),ae=this.serverEipLogicalIds.get("appInstance");if(!oe)return;let be=`EC2-${w}-${v}-api`,lt=this.mergedConfig.infrastructure?.servers?.app?.region||this.mergedConfig.project?.region||"us-east-1",_e=lt==="us-east-1"?".compute-1.amazonaws.com":`.${lt}.compute.amazonaws.com`,_t={"Fn::Join":["",["ec2-",{"Fn::Join":["-",{"Fn::Split":[".",{Ref:oe}]}]},_e]]},nr=this.resolveApiOriginPort();if(l.push({Id:be,DomainName:_t,CustomOriginConfig:{HTTPPort:nr,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}),I.push(oe),ae)I.push(ae);for(let fr of Ee)h.push(this.createComputeCacheBehavior(fr,be))}buildCaddyfile(l){let h=l.filter(([,v])=>typeof v.domain==="string"&&v.domain&&typeof v.port==="number");if(h.length===0)return;let I=new Map;for(let[,v]of h){let Ee=I.get(v.domain)??[];Ee.push({port:v.port,path:v.path}),I.set(v.domain,Ee)}let w=[];for(let[v,Ee]of I){let ae=[...Ee].sort((be,lt)=>{let _e=!be.path||be.path==="/",_t=!lt.path||lt.path==="/";if(_e&&!_t)return 1;if(!_e&&_t)return-1;return(lt.path?.length??0)-(be.path?.length??0)}).map((be)=>{let lt=!be.path||be.path==="/",_e=`reverse_proxy localhost:${be.port}`;return lt?`  handle {
+import{cg,O,dg,nA,pI,iA,gI,mI,hI,fI,yI,II,SI,CI,EI,bI,lg,ug,Cd,Ed,lo,L,d,bd,pg,M,vd,p,sA,Di,Td,wd,ge,Rd,vI,r,t,TI,wI,g,RI,DI,PI,NI,kI,Gt,Dd,uo,oA,BI,_I,Re,je,Pd,gg,mg,xI,hg,fg,Ag,Nd,yg,De,Gr,qt,kd,Vt,me,aA,Bd,po,Ig,Sg,Cg,Eg,_d,OI,F,C,a,A,ze,m,cA,Ke,U,ft,LI,dA,Q,xd,Pe,jt,go,ee,Od,te,lA,mo,H,G,N,Pi,T,zt,At,q,e,ho,$I,bg,Ld,MI,FI,UI,QI,$d,HI,GI,qI,VI,jI,zI,KI,WI,JI,XI,YI,ZI,uA,pA,gA,mA,hA,fA,AA,Kt,vg,Tg,qr,Ni,eS,wg,tS,rS,Vr,nS,iS,sS,oS,aS,cS,yA,IA,SA,CA,EA,fo,dS,bA,vA,TA,V,lS,We,Ao,Wt,wA,Rg,RA,DA,PA,Dg,re,uS,pS,gS,mS,NA,hS,j,fS,AS,yS,Pg,Ng,IS,kg,Bg,SS,CS,ES,bS,vS,kA,Md,TS,wS,RS,DS,PS,BA,_A,NS,kS,BS,_S,xS,OS,LS,$S,MS,_g,Fd,FS,US,QS,HS,xg,Og,Lg,GS,$g,qS,VS,jS,zS,Mg,KS,WS,JS,XS,YS,ZS,eC,tC,xA,OA,LA,$A,Fg,rC,nC,iC,sC,oC,aC,cC,dC,lC,MA,FA,UA,QA,uC,pC,Ug,gC,Qg,Hg,Gg,qg,mC,hC,fC,AC,Ne,ki,yC,IC,SC,CC,EC,bC,vC,TC,HA,wC,RC,Vg,jg,DC,PC,GA,NC,kC,BC,_C,xC,OC,LC,$C,MC,FC,UC,QC,HC,GC,qC,VC,jC,zC,KC,WC,JC,zg,XC,Kg,YC,Wg,ZC,Jg,eE,Xg,tE,jr,rE,Yg,nE,yo,iE,Zg,sE,em,oE,tm,aE,rm,cE,nm,dE,zr,lE,im,uE,sm,pE,om,gE,am,mE,cm,hE,dm,fE,lm,AE,um,yE,pm,IE,gm,SE,mm,CE,hm,EE,fm,bE,Am,vE,ym,TE,Im,wE,Sm,RE,Cm,DE,Em,PE,bm,NE,vm,kE,Tm,BE,wm,_E,Rm,xE,Dm,OE,qA,VA,jA,zA,Pm,LE,Nm,$E,km,ME,Bm,FE,Bi,KA,WA,Io,Ud,Kr,JA,So,Jt,Qd,Hd,XA,YA,_m,ZA,Gd,xm,UE,QE,Co,Eo,bo,qd,_i,Vd,jd,vo,zd,Kd,Om,ey,ty,ry,HE,ny,iy,GE,sy,Lm,oy,ay,cy,qE,dy,xi,Wd,ly,VE,uy,To,wo,Jd,$m,jE,Mm,zE,Fm,KE,Um,WE,Qm,JE}from"./chunk-w23wrsa4.js";import{Bo,Hm,nl,gy,Mi,il,_o,Gm,qm,Wr,xo,sl,Je,ol,al,cl,Fi,Jr,Vm,Xe,dl,Oo,Lo,$o,ll,ul,pl,Ui,Mo,gl,Xr,Qi,Fo,yt,jm,ml,hl,zm,fl,Uo,Xt,Al,yl,Il,Sl,Ye,Km,Cl,Yt,Qo,Ho,Go,Hi,Gi,Yr,El,qi,qo,Vo,Zr,bl,en,Wm,Jm,It,tn,jo,Xm,vl,Tl,zo,wl,Rl,Dl,my,ne,Pl,hy,fy,Vi,ji,Ay,he,Ym,St,ke,Be,Ct,Nl,kl,Bl,_l,Zm,eh,Ko,th,rh,Wo,xl,Ol,nh,ie,ih,Ll,fe,Jo,Ze,Et,bt,rn,zi,$l,yy,Xo,sh,oh,ah,ch,Yo,Zo,Ml,nn,ea,Fl,Ki,Ul,ta,ra,na,ia,sa,oa,aa,ca,Ql,Zt,da,Hl,sn,Gl,la,ua,ql,er,pa,ga,dh,Iy,Wi,Sy,Cy,Ey,ma,ha,Vl,lh,fa,on,jl,Ji,zl,Kl,Wl,Aa,uh,ya,Jl,ph,Ia,gh,an,cn,Xl,Xi,nu,au,cu,du,lu,uu,Zi,tr,Ca,dn,ln,rr,et,Ch,ba,Eh,bh,mu,va,ts,hu,Ta,Tt,xe,fu,wa,Ra,Au,Da,Pa,Na,ka,yu,Iu,pn,Ba,_a,xa,Oa,Su,rs,gn,ns,La}from"./chunk-k75jv8s6.js";import{x,Pr,Lc,Ms,u,Lp,$p}from"./chunk-q0g0rjn3.js";import{ut,Oc,ui,pi,gi,Op}from"./chunk-b10n1xy5.js";import{rf,nf,sf,fp,Ap,yp,of,Ip,Sp,af,cf,Cp,df,lf,_c,Ep,uf,pf,bp,gf,mf,hf,ff,Af,yf,If,li,xc,vp,Tp,wp,Rp,Dp,Pp,Np,kp,Bp,_p,xp,Sf,Cf,Ef,bf,vf,Tf,wf}from"./chunk-98qx6m9h.js";import{Ge,$c,pe,Lt,Mc,D,$t,pt,Fc,Fs,Pf,Mp,Uc,s,mi,Us,Nr,Qc,Hc,kr,Nf,Gc,cI,dI,Qs,lI,uI,qc,Vc,hi,Hs,Z,c,Gs,qe,Br,kf,Bf,jc,Mt,_f,qs,xf,Of,Vs,zc,_r,js,Lf,Kc,Fp,Ft,xr,$f,zs,Mf,P,Ff,Wc,Up,Ks,Uf,Qf,Hf,Jc,fi,Ws,Xc,Ut,gt,Gf,Or,qf,Yc,Qp,Hp,Js,Zc,ed,mt,Gp,Ai,td,Xs,Lr,qp,yi,rd,nd,Ii,Vp,id,sd,od,ad,Ys,jp,zp,Vf,Kp,cd,Si,Wp,Jp,Zs,$r,eo,to,ro,dd,Xp,ld,no,jf,Qt,zf,ud,Mr,pd,Kf,gd,Yp,Ci,Fr,io,Ei,Ve,Wf,Zp,eg,Ht,md,hd,fd,bi,vi,Ti,Jf,Xf,ht,so,Yf,Ur,tg,oo,Zf,rg,ng,ig,eA,sg,og,tA,i,rA,wi,ao,co}from"./chunk-49p5cx21.js";import{n}from"./chunk-wrpnnrdf.js";import{Ie,it,vn}from"./chunk-3zv0e36t.js";import{o}from"./chunk-2nma0bd8.js";import{Ae,ls,us,bu,Qa,Ha,ps,Ga,tt,z,rt,se,b,ye,An,qa,Oe,Va,yn,In,Sn,wt,Rt,Dt,Cn,ir,ja,sr,or,nt,En,Ka,Pt,ar,bn,Ja,Ru,Du,Xa,cr}from"./chunk-0p7ddjt6.js";import{st,ce,$e,Pu,Tn,Ya,Za,ms,Se,Nt,wn,hs,fs,dr,lr,Rn,ur,As,ys,Is,Ss,W,Cs,Es,bs,vs,de,Ts,ws,Rs,R,ec,Dn,tc,le,pr}from"./chunk-setpnrtg.js";import{K}from"./chunk-tvwrthfq.js";import{Nu,rc,Ce,nc,Pn,ku,ic,Bu,_u,Oh,kn,Ps,Bn,_n,xn,J,Me,B,Ar,Ln,yr,ue,ac,$n,cc,Sr,Un,Ns,Qn,Hn,Gn,qn,Cr,gc,Fe,X,Ue,Qe,at,ve,Er,Te,zn,Kn,Wn,Jn,Xn,Yn,Zn,br,_,_s,ip,Sc,ti,ri,ni,ii,Rc,xs,Dc,Ot,si,Os,Ls,Pc,oi,Nc}from"./chunk-7p1653g6.js";import{Xd,Ro,Oi,Li,Do,Yd,Zd,$i,Po,No,tl,rl,ko}from"./chunk-gvybjt7y.js";import{$a,mn,hn,is,ss,os,as,Ma,Fa}from"./chunk-mte9da2p.js";import{Ua}from"./chunk-e44ajkha.js";import{y}from"./chunk-mdqnpbbc.js";import{Le}from"./chunk-dm6kyz6e.js";import{S}from"./chunk-5db32a4x.js";import{Y,ai,$s,kc,ci,hp}from"./chunk-qfqh21rq.js";import{Tr,we}from"./chunk-x9bpm5s1.js";import{f}from"./chunk-08tswmb3.js";import{Zh,He}from"./chunk-6e5j40n9.js";import{Ad,Qr,yd,Id,Sd,Ri,ag,Hr}from"./chunk-h85wqdvr.js";import{createHmac as sc,createSign as vc,timingSafeEqual as Ec}from"node:crypto";function Mn(l){let h=l instanceof Date?l.getTime():l;if(!Number.isFinite(h))throw TypeError("Media access timestamp must be finite");return Math.floor(h/1000)}function lc(l){return Buffer.from(l).toString("base64").replaceAll("+","-").replaceAll("=","_").replaceAll("/","~")}function Bc(l){return Buffer.from(l).toString("base64url")}function dc(l,h=!1){if(!l||/[\r\n]/.test(l))throw TypeError("Media resource is invalid");let I=h?l.replaceAll("*","wildcard"):l,w=new URL(I);if(!["http:","https:"].includes(w.protocol))throw TypeError("Media resource must use HTTP or HTTPS");if(!h&&l.includes("*"))throw TypeError("Canned policies cannot contain wildcards")}function uc(l,h){let I=vc("RSA-SHA1");return I.update(l),I.end(),lc(I.sign(h))}function pc(l){dc(l.resource,!0);let I={DateLessThan:{"AWS:EpochTime":Mn(l.expiresAt)}};if(l.activeAt!==void 0)I.DateGreaterThan={"AWS:EpochTime":Mn(l.activeAt)};if(l.ipAddress)I.IpAddress={"AWS:SourceIp":l.ipAddress};return JSON.stringify({Statement:[{Resource:l.resource,Condition:I}]})}function Ku(l,h,I){dc(l);let w=Mn(h),v=l.includes("?")?"&":"?",Ee=pc({resource:l,expiresAt:h}),oe=uc(Ee,I.privateKey);return`${l}${v}Expires=${w}&Signature=${encodeURIComponent(oe)}&Key-Pair-Id=${encodeURIComponent(I.keyPairId)}`}function ju(l,h){let I=pc(l);return{"CloudFront-Key-Pair-Id":h.keyPairId,"CloudFront-Policy":lc(Buffer.from(I)),"CloudFront-Signature":uc(I,h.privateKey)}}function Zu(l){if(!l.resource||/[\r\n]/.test(l.resource))throw TypeError("Media resource is invalid");let h=Bc(Buffer.from(JSON.stringify({resource:l.resource,expiresAt:Mn(l.expiresAt),...l.keyId?{keyId:l.keyId}:{},...l.audience?{audience:l.audience}:{}}))),I=sc("sha256",l.secret).update(h).digest("base64url");return`${h}.${I}`}function qu(l,h){let[I,w,v]=l.split(".");if(!I||!w||v)return null;let Ee=sc("sha256",h.secret).update(I).digest(),oe;try{oe=Buffer.from(w,"base64url")}catch{return null}if(Ee.length!==oe.length||!Ec(Ee,oe))return null;try{let ae=JSON.parse(Buffer.from(I,"base64url").toString("utf8")),be=Mn(h.now??Date.now());if(!ae.resource||!Number.isSafeInteger(ae.expiresAt)||ae.expiresAt<=be)return null;if(h.resource&&ae.resource!==h.resource)return null;if(h.audience&&ae.audience!==h.audience)return null;return ae}catch{return null}}function Ju(l,h=!1){let I=new URL(l,"https://media.invalid").pathname.toLowerCase(),w=/\.(?:m3u8|mpd|vtt|json)$/.test(I),v=/\.(?:key|license)$/.test(I)||I.includes("/keys/")||I.includes("/licenses/");return{"Accept-Ranges":"bytes","Cache-Control":h&&(w||v)?"private, no-store":w?"public, max-age=5, s-maxage=30, stale-while-revalidate=30":"public, max-age=31536000, immutable","Cross-Origin-Resource-Policy":"cross-origin","X-Content-Type-Options":"nosniff"}}function Yu(l){if(!/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(l.bucket))throw TypeError("Media bucket is invalid");if(!/^[a-z0-9-]+$/.test(l.region))throw TypeError("Media bucket region is invalid");let h=l.prefix?`/${l.prefix.replace(/^\/+|\/+$/g,"")}`:"",I=l.protected??!1,w="public, max-age=31536000, immutable",v=I?"private, no-store":"public, max-age=5, s-maxage=30, stale-while-revalidate=30";return{originDomain:`${l.bucket}.s3.${l.region}.amazonaws.com`,originPath:h,domain:l.domain,trustedKeyGroupIds:[...new Set(l.trustedKeyGroupIds??[])],behaviors:[{pathPattern:"*.m3u8",cacheControl:v,compress:!0,signed:I},{pathPattern:"*.mpd",cacheControl:v,compress:!0,signed:I},{pathPattern:"*.vtt",cacheControl:v,compress:!0,signed:I},{pathPattern:"*",cacheControl:w,compress:!1,signed:I}],responseHeaders:{"Access-Control-Allow-Headers":"Range, If-Range","Access-Control-Allow-Methods":"GET, HEAD, OPTIONS","Access-Control-Allow-Origin":"*","Access-Control-Expose-Headers":"Accept-Ranges, Content-Length, Content-Range, ETag","X-Content-Type-Options":"nosniff"}}}class el{builder;config;environment;mergedConfig;serverEipLogicalIds=new Map;storageFailoverReplicas=[];constructor(l){this.config=l.config,this.environment=l.environment,this.builder=new Rd(`${this.config.project.name} - ${this.environment}`),this.mergedConfig=this.mergeEnvironmentConfig()}mergeEnvironmentConfig(){let h=this.config.environments[this.environment]?.infrastructure;if(!h)return this.config;return{...this.config,infrastructure:{...this.config.infrastructure,...h,compute:{...this.config.infrastructure?.compute,...h.compute},storage:{...this.config.infrastructure?.storage,...h.storage},functions:{...this.config.infrastructure?.functions,...h.functions},servers:{...this.config.infrastructure?.servers,...h.servers},databases:{...this.config.infrastructure?.databases,...h.databases},cdn:{...this.config.infrastructure?.cdn,...h.cdn},sftp:h.sftp??this.config.infrastructure?.sftp,queues:{...this.config.infrastructure?.queues,...h.queues},redirects:{...this.config.infrastructure?.redirects,...h.redirects},realtime:{...this.config.infrastructure?.realtime,...h.realtime},cache:{...this.config.infrastructure?.cache,...h.cache},fileSystem:{...this.config.infrastructure?.fileSystem,...h.fileSystem},email:{...this.config.infrastructure?.email,...h.email},search:{...this.config.infrastructure?.search,...h.search},ai:{...this.config.infrastructure?.ai,...h.ai}}}}shouldDeploy(l){if(l.environments&&!l.environments.includes(this.environment))return!1;if(l.requiresFeatures){let h=this.config.features||{};if(!l.requiresFeatures.every((w)=>h[w]===!0))return!1}if(l.regions){let h=this.config.environments[this.environment]?.region||this.config.project.region;if(!l.regions.includes(h))return!1}if(l.condition&&typeof l.condition==="function")return l.condition(this.config,this.environment);return!0}resolveApiOriginPort(){let l=this.mergedConfig.infrastructure?.api?.port??this.mergedConfig.ports?.api,h=Number(l||3008);return Number.isFinite(h)&&h>0?h:3008}defaultComputeCachePathPatterns(){return["/api/*","/auth/*","/publisher/api/*","/publisher/*","/publish","/publish/*","/analytics/*","/packages/*","/npm/*","/zig/*","/php/*","/commits/*","/health","/dashboard/*","/search","/login","/logout","/signup","/account","/account/*"]}shouldRouteStorageBucketToCompute(l,h){return l==="public"||h.routeCompute===!0}storageBucketName(l,h,I){return this.mergedConfig.infrastructure?.storage?.[I]?.bucket??`${l}-${h}-${I}`}fileSystemLogicalId(l,h,I){return t(r({slug:`${l}-${I}`,environment:h,resourceType:"efs"}))}resolveSftpStorage(l,h,I){let w=l.storage;if(w?.type==="efs"&&w.fileSystem){if(!this.mergedConfig.infrastructure?.fileSystem?.[w.fileSystem])throw Error(`sftp: storage.fileSystem "${w.fileSystem}" is not defined in infrastructure.fileSystem`);return{type:"efs",fileSystemId:{Ref:this.fileSystemLogicalId(h,I,w.fileSystem)},posixProfile:w.posixProfile}}if(w?.type==="s3"&&w.storageBucket){if(!this.mergedConfig.infrastructure?.storage?.[w.storageBucket])throw Error(`sftp: storage.storageBucket "${w.storageBucket}" is not defined in infrastructure.storage`);return{type:"s3",bucket:this.storageBucketName(h,I,w.storageBucket)}}return}resolveComputeCachePathPatterns(l){if(l&&l.length>0)return l;return this.defaultComputeCachePathPatterns()}createComputeCacheBehavior(l,h){return{PathPattern:l,TargetOriginId:h,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac"}}appendComputeAppOrigin(l,h,I,w,v,Ee){let oe=this.serverEipLogicalIds.get("app"),ae=this.serverEipLogicalIds.get("appInstance");if(!oe)return;let be=`EC2-${w}-${v}-api`,lt=this.mergedConfig.infrastructure?.servers?.app?.region||this.mergedConfig.project?.region||"us-east-1",_e=lt==="us-east-1"?".compute-1.amazonaws.com":`.${lt}.compute.amazonaws.com`,_t={"Fn::Join":["",["ec2-",{"Fn::Join":["-",{"Fn::Split":[".",{Ref:oe}]}]},_e]]},nr=this.resolveApiOriginPort();if(l.push({Id:be,DomainName:_t,CustomOriginConfig:{HTTPPort:nr,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}),I.push(oe),ae)I.push(ae);for(let fr of Ee)h.push(this.createComputeCacheBehavior(fr,be))}buildCaddyfile(l){let h=l.filter(([,v])=>typeof v.domain==="string"&&v.domain&&typeof v.port==="number");if(h.length===0)return;let I=new Map;for(let[,v]of h){let Ee=I.get(v.domain)??[];Ee.push({port:v.port,path:v.path}),I.set(v.domain,Ee)}let w=[];for(let[v,Ee]of I){let ae=[...Ee].sort((be,lt)=>{let _e=!be.path||be.path==="/",_t=!lt.path||lt.path==="/";if(_e&&!_t)return 1;if(!_e&&_t)return-1;return(lt.path?.length??0)-(be.path?.length??0)}).map((be)=>{let lt=!be.path||be.path==="/",_e=`reverse_proxy localhost:${be.port}`;return lt?`  handle {
     ${_e}
   }`:`  handle ${be.path} {
     ${_e}

package/dist/ui/404.html

@@ -2,7 +2,7 @@
 <html lang="en" data-theme="dark">
 <head>
   <meta charset="UTF-8">
-  <meta name="stx-build" content="mutes5g5o7g0x1">
+  <meta name="stx-build" content="muu02x3lt7trg7">
 
 <!-- stx SEO Tags -->
 <meta name="title" content="Page not found · ts-cloud">

package/dist/ui/accept-invitation.html

@@ -1,4 +1,4 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muterrifmyp8tx"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Accept invitation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.616c25f3.css"></head><body class="auth-page"><main class="auth-card" id="main-content"><a class="brand" href="/"><span class="dot"></span><span>ts-cloud</span></a><div><span class="context-label">Organization invitation</span><h1>Join your team</h1><p>Choose the dashboard username and password you will use after this invitation is accepted.</p></div><form id="accept-invitation-form" class="auth-form"><div class="field-block"><label for="invite-name">Name</label><input id="invite-name" name="name" autocomplete="name" placeholder="Chris Breuer"></div><div class="field-block"><label for="invite-username">Username</label><input id="invite-username" name="username" autocomplete="username" minlength="2" maxlength="32" required></div><div class="field-block"><label for="invite-password">Password</label><input id="invite-password" name="password" type="password" autocomplete="new-password" minlength="12" required><small>At least 12 characters.</small></div><button class="btn" type="submit">Accept invitation</button><div id="invitation-status" class="auth-status" role="status"></div></form><p class="note">If this link expired or was already used, ask an organization owner to resend the invitation.</p></main> <script data-stx-scoped data-stx-run="always">
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muu02l39n2708d"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Accept invitation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.616c25f3.css"></head><body class="auth-page"><main class="auth-card" id="main-content"><a class="brand" href="/"><span class="dot"></span><span>ts-cloud</span></a><div><span class="context-label">Organization invitation</span><h1>Join your team</h1><p>Choose the dashboard username and password you will use after this invitation is accepted.</p></div><form id="accept-invitation-form" class="auth-form"><div class="field-block"><label for="invite-name">Name</label><input id="invite-name" name="name" autocomplete="name" placeholder="Chris Breuer"></div><div class="field-block"><label for="invite-username">Username</label><input id="invite-username" name="username" autocomplete="username" minlength="2" maxlength="32" required></div><div class="field-block"><label for="invite-password">Password</label><input id="invite-password" name="password" type="password" autocomplete="new-password" minlength="12" required><small>At least 12 characters.</small></div><button class="btn" type="submit">Accept invitation</button><div id="invitation-status" class="auth-status" role="status"></div></form><p class="note">If this link expired or was already used, ask an organization owner to resend the invitation.</p></main> <script data-stx-scoped data-stx-run="always">
 ;(function() {
   'use strict';
 (() => {

package/dist/ui/access-denied.html

@@ -1,4 +1,4 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muterrifmyp8tx"><meta name="title" content="Access unavailable · ts-cloud"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="Access unavailable · ts-cloud"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="Access unavailable · ts-cloud"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Access unavailable · ts-cloud</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_50" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muu02l39n2708d"><meta name="title" content="Access unavailable · ts-cloud"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="Access unavailable · ts-cloud"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="Access unavailable · ts-cloud"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Access unavailable · ts-cloud</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_50" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];

package/dist/ui/account/automation.html

@@ -1,5 +1,5 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muterrifmyp8tx"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - API &amp; automation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
-function __stx_setup_1791093409174_5() {
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="muu02l39n2708d"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - API &amp; automation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
+function __stx_setup_1791129186055_5() {
   const { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
 
 const accounts = state([]);
@@ -189,9 +189,9 @@ onMount(() => {
 
   return { accounts, project, environments, resources, message, messageKind, reveal, accountSlug, accountName, accountRole, accountScopeType, accountScopeId, selectedAccount, tokenName, tokenCapabilities, tokenScopeType, tokenScopeId, tokenExpiry, password, mfaCode, capabilities, setMessage, setScope, scopeLabel, tokenState, toggleCapability, load, selectAccount, stepUp, createAccount, createToken, tokenAction, disableAccount, curlExample, cliExample, copy };
 }
-window.__stx_latestSetup=__stx_setup_1791093409174_5;
-if(window.stx)window.stx._latestSetup=__stx_setup_1791093409174_5;
-</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1791093409174_5"><a data-stx-scope="stx_scope_nav_8" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="active" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+window.__stx_latestSetup=__stx_setup_1791129186055_5;
+if(window.stx)window.stx._latestSetup=__stx_setup_1791129186055_5;
+</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1791129186055_5"><a data-stx-scope="stx_scope_nav_6" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="active" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];
@@ -542,6 +542,6 @@ if(window.stx)window.stx._latestSetup=__stx_setup_1791093409174_5;
   
   
   try { if (typeof __stxScopeRenames !== 'undefined' && __stxScopeRenames) { for (var __stxRK in __stxScopeRenames) __scopeRegistration[__stxRK] = __stxScopeRenames[__stxRK]; } } catch (e) { /* no renames */ }
-  window.stx._scopes['stx_scope_nav_8'] = __scopeRegistration;
+  window.stx._scopes['stx_scope_nav_6'] = __scopeRegistration;
 })();
 </script> <div class="wrap"><div class="crumbs"><a href="/">Dashboard</a><span class="sep">/</span> Organization <span class="sep">/</span> API &amp; automation</div><header class="page"><div><h1>API &amp; automation</h1><p>Create least-privilege machine identities for CI. Tokens never create browser sessions and cannot access outside their membership and token scope.</p></div><a class="btn ghost" href="/api/v1/openapi.json">OpenAPI 3.1</a></header><div class="automation-message msg" :class="messageKind()" role="status" aria-live="polite" x-cloak>{{ message() }}</div><div class="panel reveal" @show="!!reveal()" x-cloak><div><strong>Copy this token now</strong><span>The raw secret is shown once. Rotation keeps the old token active until you explicitly revoke it.</span></div><code x-cloak>{{ reveal()?.secret }}</code><button class="btn sm" type="button" @click="copy(reveal()?.secret)">Copy token</button><label>curl</label><code x-cloak>{{ curlExample() }}</code><button class="btn ghost sm" type="button" @click="copy(curlExample())">Copy curl</button><label>CLI</label><code x-cloak>{{ cliExample() }}</code><button class="btn ghost sm" type="button" @click="copy(cliExample())">Copy CLI</button><button class="btn danger sm" type="button" @click="reveal.set(null)">I saved it; hide secret</button></div><div class="section"><h2>Service accounts</h2><div class="accounts" x-cloak><template :for="item in accounts()"><article class="account panel" :class="selectedAccount() === item.account.id ? 'selected' : ''" x-cloak><button class="account-main" type="button" @click="selectAccount(item)" x-cloak><span x-cloak><strong x-cloak>{{ item.account.name }}</strong><small x-cloak>{{ item.account.slug }} · {{ item.membership?.roleTemplate }} · {{ scopeLabel(item.membership?.scope) }}</small><small x-cloak>Created {{ new Date(item.account.createdAt).toLocaleDateString() }} by {{ item.createdBy?.displayName || 'offline administrator' }}</small></span><span class="tag" x-cloak>{{ item.account.state }}</span></button><div class="token-list" x-cloak><template :for="token in item.tokens"><div class="token" x-cloak><div x-cloak><strong x-cloak>{{ token.name }}</strong><code x-cloak>{{ token.prefix }}</code><small x-cloak>{{ tokenState(token) }} · created {{ new Date(token.createdAt).toLocaleDateString() }} by {{ token.createdBy?.displayName || 'offline administrator' }} · expires {{ new Date(token.expiresAt).toLocaleDateString() }} · last used {{ token.lastUsedAt ? new Date(token.lastUsedAt).toLocaleString() : 'never' }}</small><small x-cloak>{{ token.capabilities.join(', ') }} · {{ scopeLabel(token.scope) }}</small></div><div class="table-actions"><button class="btn ghost sm" type="button" @show="token.state === 'active'" @click="tokenAction(token, 'rotate')" x-cloak>Rotate</button><button class="btn danger sm" type="button" @show="token.state === 'active'" @click="tokenAction(token, 'revoke')" x-cloak>Revoke</button></div></div></template><div class="compact empty" @show="item.tokens.length === 0" x-cloak><span>No tokens yet.</span></div></div><button class="btn danger sm" type="button" @show="item.account.state === 'active'" @click="disableAccount(item)" x-cloak>Disable account and tokens</button></article></template><div class="compact empty panel" @show="accounts().length === 0" x-cloak><strong>No service accounts</strong><span>Create one for a CI system or external automation.</span></div></div></div><div class="section"><h2>Create service account</h2><div class="panel"><form class="form-grid" @submit.prevent="createAccount()"><div class="field-block"><label for="account-name">Name</label><input id="account-name" :value="accountName()" @input="accountName.set($event.target.value)" placeholder="Production CI" required></div><div class="field-block"><label for="account-slug">Slug</label><input id="account-slug" :value="accountSlug()" @input="accountSlug.set($event.target.value)" pattern="[a-z0-9][a-z0-9-]{1,47}" placeholder="production-ci" required></div><div class="field-block"><label for="account-role">Maximum role</label><select id="account-role" :value="accountRole()" @change="accountRole.set($event.target.value)"><option value="viewer">Viewer</option><option value="auditor">Auditor</option><option value="deployer">Deployer</option><option value="operator">Operator</option><option value="admin">Admin</option></select><small>Service accounts can never be owners.</small></div><div class="field-block"><label for="account-scope">Maximum scope</label><select id="account-scope" :value="accountScopeType()" @change="accountScopeType.set($event.target.value); setScope($event.target.value, accountScopeId)"><option value="organization">Organization</option><option value="project">Current project</option><option value="environment">One environment</option><option value="resource">One service</option></select></div><div class="field-block" @show="accountScopeType() === 'environment'" x-cloak><label for="account-environment">Environment</label><select id="account-environment" :value="accountScopeId()" @change="accountScopeId.set($event.target.value)"><template :for="environment in environments()"><option :value="environment.id">{{ environment.name }}</option></template></select></div><div class="field-block" @show="accountScopeType() === 'resource'" x-cloak><label for="account-resource">Service</label><select id="account-resource" :value="accountScopeId()" @change="accountScopeId.set($event.target.value)"><template :for="resource in resources()"><option :value="resource.id">{{ resource.name }}</option></template></select></div><div class="form-actions"><button class="btn" type="submit">Create service account</button></div></form></div></div><div class="section"><h2>Create API token</h2><div class="panel"><form class="form-grid" @submit.prevent="createToken()"><div class="field-block"><label for="token-account">Service account</label><select id="token-account" :value="selectedAccount()" @change="selectAccount(accounts().find(item => item.account.id === $event.target.value))" required><template :for="item in accounts()"><option :value="item.account.id" :disabled="item.account.state !== 'active'">{{ item.account.name }}</option></template></select></div><div class="field-block"><label for="token-name">Token name</label><input id="token-name" :value="tokenName()" @input="tokenName.set($event.target.value)" required></div><div class="field-block"><label for="token-expiry">Expiry</label><input id="token-expiry" type="date" :value="tokenExpiry()" @input="tokenExpiry.set($event.target.value)"><small>Defaults to 90 days; maximum one year.</small></div><div class="field-block"><label for="token-scope">Token scope</label><select id="token-scope" :value="tokenScopeType()" @change="tokenScopeType.set($event.target.value); setScope($event.target.value, tokenScopeId)"><option value="organization">Organization</option><option value="project">Current project</option><option value="environment">One environment</option><option value="resource">One service</option></select><small>Must be equal to or narrower than the service-account scope.</small></div><div class="field-block" @show="tokenScopeType() === 'environment'" x-cloak><label>Environment</label><select :value="tokenScopeId()" @change="tokenScopeId.set($event.target.value)"><template :for="environment in environments()"><option :value="environment.id">{{ environment.name }}</option></template></select></div><div class="field-block" @show="tokenScopeType() === 'resource'" x-cloak><label>Service</label><select :value="tokenScopeId()" @change="tokenScopeId.set($event.target.value)"><template :for="resource in resources()"><option :value="resource.id">{{ resource.name }}</option></template></select></div><fieldset class="capabilities"><legend>Explicit capabilities</legend><template :for="capability in capabilities"><label class="capability" x-cloak><input type="checkbox" :checked="tokenCapabilities().includes(capability[0])" @change="toggleCapability(capability[0])"><span x-cloak><b x-cloak>{{ capability[0] }}</b><small x-cloak>{{ capability[1] }}</small></span></label></template></fieldset><div class="form-actions"><button class="btn" type="submit" :disabled="!selectedAccount() || tokenCapabilities().length === 0">Create and reveal token</button></div></form></div></div><div class="section"><h2>Confirm sensitive changes</h2><div class="auth-grid panel"><div class="field-block"><label for="automation-password">Your password</label><input id="automation-password" type="password" autocomplete="current-password" :value="password()" @input="password.set($event.target.value)" required></div><div class="field-block"><label for="automation-code">Authenticator or recovery code</label><input id="automation-code" autocomplete="one-time-code" :value="mfaCode()" @input="mfaCode.set($event.target.value)"><small>Required when MFA is enabled. Used only for recent-auth confirmation.</small></div></div></div></div><style> .automation-message{min-height:20px;margin-top:12px}.accounts{display:grid;gap:12px}.account{display:grid;gap:14px}.account.selected{border-color:var(--accent)} .account-main{display:flex;justify-content:space-between;gap:12px;width:100%;text-align:left;background:none;border:0;color:inherit;cursor:pointer}.account-main span:first-child{display:grid;gap:4px}.account-main small,.token small{color:var(--txt3);font-size:12px;line-height:1.5} .token-list{display:grid;gap:10px}.token{display:flex;justify-content:space-between;gap:14px;padding:12px;border:1px solid var(--panel-br);border-radius:10px}.token>div:first-child{display:grid;gap:4px;min-width:0}.token code{color:var(--txt2)} .reveal{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;margin-top:18px;border-color:rgba(53,209,155,.35)}.reveal>div,.reveal>code,.reveal>label{grid-column:1/-1}.reveal>div{display:grid;gap:4px}.reveal span{color:var(--txt2);font-size:12px}.reveal code{padding:10px;background:rgba(0,0,0,.25);border-radius:8px;overflow-wrap:anywhere;user-select:all} .capabilities{grid-column:1/-1;border:1px solid var(--panel-br);border-radius:10px;padding:12px;display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:8px}.capabilities legend{padding:0 6px;color:var(--txt3);font-size:11px;font-weight:800;text-transform:uppercase}.capability{display:flex;gap:9px;align-items:flex-start;padding:9px}.capability input{width:auto;margin-top:3px}.capability span{display:grid;gap:2px}.capability small{color:var(--txt3);font-size:11px}.auth-grid{display:grid;grid-template-columns:1fr 1fr;gap:14px} @media(max-width:700px){.token{display:grid}.reveal,.capabilities,.auth-grid{grid-template-columns:1fr}.reveal>*{grid-column:1}} </style></body></html>