@stacksjs/ts-cloud 0.16.43 → 0.16.45

package/dist/{chunk-my61jkg1.js → chunk-x2pxtfk0.js}

@@ -8,7 +8,7 @@ var v;try{v=await import("node:crypto")}catch{}var C=new Map,_=100,ee={appstream
 `),w=J(r,d,h,a,P,g??C);return o.searchParams.set("X-Amz-Signature",w),{url:o.toString(),method:t,headers:{},body:s||void 0}}async function ne(e){let{urlObj:n,method:t,body:s,accessKeyId:c,secretAccessKey:r,sessionToken:i,service:a,region:h,timestamp:m,date:d,credentialScope:f,algorithm:p,expiresIn:u,cache:g}=e,o=new URL(n.toString());o.searchParams.set("X-Amz-Algorithm",p),o.searchParams.set("X-Amz-Credential",`${c}/${f}`),o.searchParams.set("X-Amz-Date",m),o.searchParams.set("X-Amz-Expires",String(u));let y=a==="s3"?"UNSIGNED-PAYLOAD":await T(s);if(a==="s3")o.searchParams.set("X-Amz-Content-Sha256",y);let S="host";if(o.searchParams.set("X-Amz-SignedHeaders",S),i)o.searchParams.set("X-Amz-Security-Token",i);let b=O(o.pathname||"/"),A=`host:${o.hostname}
 `,x=j(o.searchParams),l=[t,b,x,A,S,y].join(`
 `),P=[p,m,f,await T(l)].join(`
-`),w=await V(r,d,h,a,P,g??C);return o.searchParams.set("X-Amz-Signature",w),{url:o.toString(),method:t,headers:{},body:s||void 0}}function Lo(e){let{url:n,method:t="GET",expiresIn:s=3600,...c}=e,r=Math.min(s,604800);return R({...c,url:n,method:t,signQuery:!0,expiresIn:r}).url}async function Yy(e){let{url:n,method:t="GET",expiresIn:s=3600,...c}=e,r=Math.min(s,604800);return(await Pl({...c,url:n,method:t,signQuery:!0,expiresIn:r})).url}function N(e){return Object.keys(e).sort().map((n)=>`${n.toLowerCase()}:${e[n].trim().replace(/\s+/g," ")}`).join(`
+`),w=await V(r,d,h,a,P,g??C);return o.searchParams.set("X-Amz-Signature",w),{url:o.toString(),method:t,headers:{},body:s||void 0}}function Mo(e){let{url:n,method:t="GET",expiresIn:s=3600,...c}=e,r=Math.min(s,604800);return R({...c,url:n,method:t,signQuery:!0,expiresIn:r}).url}async function Yy(e){let{url:n,method:t="GET",expiresIn:s=3600,...c}=e,r=Math.min(s,604800);return(await Pl({...c,url:n,method:t,signQuery:!0,expiresIn:r})).url}function N(e){return Object.keys(e).sort().map((n)=>`${n.toLowerCase()}:${e[n].trim().replace(/\s+/g," ")}`).join(`
 `)+`
 `}function G(e){return Object.keys(e).sort().map((n)=>n.toLowerCase()).join(";")}function j(e){let n=[];return e.forEach((t,s)=>{n.push([Q(s),Q(t)])}),n.sort((t,s)=>{if(t[0]<s[0])return-1;if(t[0]>s[0])return 1;if(t[1]<s[1])return-1;if(t[1]>s[1])return 1;return 0}),n.map(([t,s])=>`${t}=${s}`).join("&")}function O(e){return e.split("/").map((n)=>Q(n)).join("/")}function Q(e){return encodeURIComponent(e).replace(/[!'()*]/g,(n)=>`%${n.charCodeAt(0).toString(16).toUpperCase()}`)}function U(e){if(!v)throw Error("Synchronous hash not available in browser. Use signRequestAsync() instead.");return v.createHash("sha256").update(e,"utf8").digest("hex")}function z(e,n){if(!v)throw Error("Synchronous hmac not available in browser. Use signRequestAsync() instead.");return v.createHmac("sha256",e).update(n,"utf8").digest()}async function T(e){let t=new TextEncoder().encode(e),s=await crypto.subtle.digest("SHA-256",t);return Y(new Uint8Array(s))}async function E(e,n){let t=new TextEncoder,s=typeof e==="string"?t.encode(e):e,c=t.encode(n),r=await crypto.subtle.importKey("raw",s.buffer,{name:"HMAC",hash:"SHA-256"},!1,["sign"]),i=await crypto.subtle.sign("HMAC",r,c.buffer);return new Uint8Array(i)}function Y(e){return Array.from(e).map((n)=>n.toString(16).padStart(2,"0")).join("")}function J(e,n,t,s,c,r){let i=`${e}:${n}:${t}:${s}`,a=r.get(i);if(!a){let h=z(`AWS4${e}`,n),m=z(h,t),d=z(m,s);if(a=z(d,"aws4_request"),r.size>=_){let f=r.keys().next().value;if(f)r.delete(f)}r.set(i,a)}return z(a,c).toString("hex")}async function V(e,n,t,s,c,r){let i=`${e}:${n}:${t}:${s}`,a=r.get(i);if(!a){let m=await E(`AWS4${e}`,n),d=await E(m,t),f=await E(d,s);if(a=await E(f,"aws4_request"),r.size>=_){let p=r.keys().next().value;if(p)r.delete(p)}r.set(i,a)}let h=await E(a,c);return Y(h)}function Z(e,n){return n.includes(e)}function H(e,n,t){let s=n*Math.pow(2,e),c=Math.random()*0.3*s;return Math.min(s+c,t)}function I(e){return new Promise((n)=>setTimeout(n,e))}async function hf(e,n){let{maxRetries:t=3,initialDelayMs:s=100,maxDelayMs:c=5000,retryableStatusCodes:r=[429,500,502,503,504],timeoutMs:i=30000}=n??{},a,h;for(let m=0;m<=t;m++){let d=R(e),f={method:d.method,headers:d.headers};if(d.body)f.body=d.body;let p=new AbortController,u=setTimeout(()=>p.abort(),i);f.signal=p.signal;try{let g=await fetch(d.url,f);if(clearTimeout(u),h=g,g.ok)return g;if(m<t&&Z(g.status,r)){let y=H(m,s,c);await I(y);continue}let o=await g.text();throw Error(`AWS API request failed (${g.status}): ${o}`)}catch(g){if(clearTimeout(u),a=g,g instanceof Error&&g.name==="AbortError")a=Error(`Request timed out after ${i}ms`);if(m<t&&!(g instanceof Error&&g.message.includes("AWS API request failed"))){let o=H(m,s,c);await I(o);continue}throw a}}throw a??Error("Request failed after retries")}async function Zy(e){return hf(e,{maxRetries:0})}async function eS(e,n){let{maxRetries:t=3,initialDelayMs:s=100,maxDelayMs:c=5000,retryableStatusCodes:r=[429,500,502,503,504],timeoutMs:i=30000}=n??{},a;for(let h=0;h<=t;h++){let m=await Pl(e),d={method:m.method,headers:m.headers};if(m.body)d.body=m.body;let f=new AbortController,p=setTimeout(()=>f.abort(),i);d.signal=f.signal;try{let u=await fetch(m.url,d);if(clearTimeout(p),u.ok)return u;if(h<t&&Z(u.status,r)){let o=H(h,s,c);await I(o);continue}let g=await u.text();throw Error(`AWS API request failed (${u.status}): ${g}`)}catch(u){if(clearTimeout(p),a=u,u instanceof Error&&u.name==="AbortError")a=Error(`Request timed out after ${i}ms`);if(h<t&&!(u instanceof Error&&u.message.includes("AWS API request failed"))){let g=H(h,s,c);await I(g);continue}throw a}}throw a??Error("Request failed after retries")}async function tS(e){let n=await e.text(),t={},s=/<(\w+)>([^<]+)<\/\1>/g,c;while((c=s.exec(n))!==null){let[,r,i]=c;t[r]=i}return t}async function rS(e){return await e.json()}function nS(){C.clear()}function iS(){return C.size}function sS(){return v!==void 0}function oS(){return typeof crypto<"u"&&typeof crypto.subtle<"u"}
-export{Dl,R,Pl,Lo,Yy,hf,Zy,eS,tS,rS,nS,iS,sS,oS};
+export{Dl,R,Pl,Mo,Yy,hf,Zy,eS,tS,rS,nS,iS,sS,oS};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{An,yn,Nu,ds,ku,Bu,xu,Na,Ou,_u,Gf,Lu,C,$u,ls,xe,Mu,Fu,IS,Uu,Qu,Hu,Gu,Vu,Vf,bS,CS,ES,qf,jf,vS,TS,zf,Kf,wS,us,cr,ka,Sn,In,dr,rt,Pt,gs,Wf,bn,qu,ju,Ba,ms,En,fs,ja}from"../chunk-qeshf0mh.js";import{za,vn,Tn,hs,As,ys,Ss,Ka,Wa}from"../chunk-rqraq71y.js";import{Ja}from"../chunk-qztdtcc8.js";import"../chunk-vps4v353.js";import"../chunk-w78e5n94.js";import"../chunk-3s8dtcz8.js";import"../chunk-varjr6np.js";import"../chunk-ct72f70x.js";import"../chunk-j6fsxq8q.js";import"../chunk-97gre81w.js";import{lg,fc,Ce,hc,Un,ug,Ac,Uc,qs,Qc,Gt,fi,js}from"../chunk-nqb7yefs.js";import"../chunk-fwcf0n8f.js";import"../chunk-9e4afej1.js";import"../chunk-bwtxb2hf.js";import"../chunk-cgcthvq9.js";import{pt,eA,Kc,bi,Ci,Ei,yp}from"../chunk-hc140wnm.js";import{_,_r,Lr,Wc,Ws,u,tA,Sp,Ip,nI,iI}from"../chunk-xejwnb6f.js";import"../chunk-e3evn28t.js";import"../chunk-bj4kvqwz.js";import"../chunk-my61jkg1.js";export{eA as DEFAULT_SITE_PORT_RANGE,pt as HOST_SITES_DIR,hc as IPV6_EXCLUDED_HOST_LABELS,Uc as MANAGEMENT_DASHBOARD_SITE,An as addSiteToCloudConfig,yp as allocateSitePorts,wS as buildAndPushContainerImage,Ja as buildAndPushServerlessImage,cr as buildFunctionEnv,Ci as buildHostSitePortsScript,js as buildManagementDashboardArtifact,Pt as buildServerTopology,gs as buildServerlessTopology,Wf as buildTopology,Ba as collectEgressMetrics,lg as collectServerDnsDomains,Kf as createContainerImageDependencies,qf as createExistingStaticFullStackDependencies,Vf as createStaticApiOriginDependencies,En as dashboardActions,qs as dashboardCredentialsFile,Mu as dashboardPageRoutes,Gu as deleteFailoverReplicaBuckets,Ka as deleteStaticSite,vS as deployExistingStaticFullStack,ka as deployServerlessApp,iI as deployShipsFiles,Vu as deploySite,bS as deployStaticApiOrigin,As as deployStaticSite,Wa as deployStaticSiteFull,vn as deployStaticSiteWithExternalDns,Tn as deployStaticSiteWithExternalDnsFull,qu as egressReportMetrics,C as ensureDashboardActor,Uu as ensureFailoverReplicaBuckets,fi as ensureManagementDashboard,TS as estimateExistingStaticFullStackMonthlyCost,ES as estimateStaticApiOriginMonthlyCost,ju as fetchEgressReport,jf as generateExistingStaticFullStackTemplate,za as generateExternalDnsStaticSiteTemplate,hs as generateStaticSiteTemplate,Qu as grantFailoverReplicaAccess,tA as hasComputeConfigured,Wc as hasProxyUpstream,zf as hashContainerContext,Un as hostAcceptsIpv6,us as infraEnvFromOutputs,$u as initializeDashboardControlPlane,Ss as invalidateCache,_r as isPhpSite,Na as isValidHostname,Ce as normalizePublicIpv6,bi as occupiedHostPorts,Ei as parseHostSiteFragments,Kc as parseUpstreamPort,ug as reconcileAddressRecords,Sn as redeployServerlessApp,yn as removeSiteFromCloudConfig,fc as removeStaleServerAddressRecords,Ou as renderAliasesValue,xu as renderEnvValue,_u as renderRedirectsValue,Gf as renderSiteSnippet,ku as renderSslValue,Bu as renderStringValue,fs as resolveDashboardAction,Qc as resolveDashboardAuth,bn as resolveDashboardData,Fu as resolveLegacyDashboardRoute,Lr as resolveProxyUpstreams,Ws as resolveSiteDeployTarget,u as resolveSiteKind,Gt as resolveUiSource,In as rollbackServerlessApp,IS as routesForDashboard,rt as runRemoteCommand,ms as sanitizeCloudConfig,Hu as seedFailoverReplicas,Lu as setAttachToInCloudConfig,dr as setMaintenance,ds as setSitePropertyInCloudConfig,Ip as shipsARelease,nI as shipsToBucket,_ as siteInstallBase,ja as startLocalDashboardServer,ls as synchronizeDashboardUsers,xe as trackDashboardOperation,Nu as updateSiteInCloudConfig,ys as uploadStaticFiles,Sp as validateDeploymentConfig,Ac as verifyAddressRecord,CS as verifyStaticApiOrigin};
+import{An,yn,Nu,ds,ku,Bu,xu,Ba,Ou,_u,Gf,Lu,C,$u,ls,xe,Mu,Fu,IS,Uu,Qu,Hu,Gu,Vu,Vf,bS,CS,ES,qf,jf,vS,TS,zf,Kf,wS,us,cr,xa,Sn,In,dr,rt,Pt,gs,Wf,bn,qu,ju,Oa,ms,En,fs,Ka}from"../chunk-294kdscm.js";import{Wa,vn,Tn,hs,As,ys,Ss,Ja,Xa}from"../chunk-j5x0qn7z.js";import{Ya}from"../chunk-96vc5w8w.js";import"../chunk-8jsf214f.js";import"../chunk-w78e5n94.js";import"../chunk-3s8dtcz8.js";import"../chunk-varjr6np.js";import"../chunk-ct72f70x.js";import"../chunk-gp9tkznp.js";import"../chunk-97gre81w.js";import{lg,fc,Ce,hc,Un,ug,Ac,Uc,zs,Qc,Gt,fi,Ks}from"../chunk-vv5fmmhr.js";import"../chunk-fwcf0n8f.js";import"../chunk-9e4afej1.js";import"../chunk-bwtxb2hf.js";import"../chunk-cgcthvq9.js";import{pt,eA,Kc,bi,Ci,Ei,yp}from"../chunk-1w9v8g26.js";import{_,_r,Lr,Wc,Xs,u,tA,Sp,Ip,nI,iI}from"../chunk-hm6pwhne.js";import"../chunk-v3w791ze.js";import"../chunk-c5jyzyqw.js";import"../chunk-x2pxtfk0.js";export{eA as DEFAULT_SITE_PORT_RANGE,pt as HOST_SITES_DIR,hc as IPV6_EXCLUDED_HOST_LABELS,Uc as MANAGEMENT_DASHBOARD_SITE,An as addSiteToCloudConfig,yp as allocateSitePorts,wS as buildAndPushContainerImage,Ya as buildAndPushServerlessImage,cr as buildFunctionEnv,Ci as buildHostSitePortsScript,Ks as buildManagementDashboardArtifact,Pt as buildServerTopology,gs as buildServerlessTopology,Wf as buildTopology,Oa as collectEgressMetrics,lg as collectServerDnsDomains,Kf as createContainerImageDependencies,qf as createExistingStaticFullStackDependencies,Vf as createStaticApiOriginDependencies,En as dashboardActions,zs as dashboardCredentialsFile,Mu as dashboardPageRoutes,Gu as deleteFailoverReplicaBuckets,Ja as deleteStaticSite,vS as deployExistingStaticFullStack,xa as deployServerlessApp,iI as deployShipsFiles,Vu as deploySite,bS as deployStaticApiOrigin,As as deployStaticSite,Xa as deployStaticSiteFull,vn as deployStaticSiteWithExternalDns,Tn as deployStaticSiteWithExternalDnsFull,qu as egressReportMetrics,C as ensureDashboardActor,Uu as ensureFailoverReplicaBuckets,fi as ensureManagementDashboard,TS as estimateExistingStaticFullStackMonthlyCost,ES as estimateStaticApiOriginMonthlyCost,ju as fetchEgressReport,jf as generateExistingStaticFullStackTemplate,Wa as generateExternalDnsStaticSiteTemplate,hs as generateStaticSiteTemplate,Qu as grantFailoverReplicaAccess,tA as hasComputeConfigured,Wc as hasProxyUpstream,zf as hashContainerContext,Un as hostAcceptsIpv6,us as infraEnvFromOutputs,$u as initializeDashboardControlPlane,Ss as invalidateCache,_r as isPhpSite,Ba as isValidHostname,Ce as normalizePublicIpv6,bi as occupiedHostPorts,Ei as parseHostSiteFragments,Kc as parseUpstreamPort,ug as reconcileAddressRecords,Sn as redeployServerlessApp,yn as removeSiteFromCloudConfig,fc as removeStaleServerAddressRecords,Ou as renderAliasesValue,xu as renderEnvValue,_u as renderRedirectsValue,Gf as renderSiteSnippet,ku as renderSslValue,Bu as renderStringValue,fs as resolveDashboardAction,Qc as resolveDashboardAuth,bn as resolveDashboardData,Fu as resolveLegacyDashboardRoute,Lr as resolveProxyUpstreams,Xs as resolveSiteDeployTarget,u as resolveSiteKind,Gt as resolveUiSource,In as rollbackServerlessApp,IS as routesForDashboard,rt as runRemoteCommand,ms as sanitizeCloudConfig,Hu as seedFailoverReplicas,Lu as setAttachToInCloudConfig,dr as setMaintenance,ds as setSitePropertyInCloudConfig,Ip as shipsARelease,nI as shipsToBucket,_ as siteInstallBase,Ka as startLocalDashboardServer,ls as synchronizeDashboardUsers,xe as trackDashboardOperation,Nu as updateSiteInCloudConfig,ys as uploadStaticFiles,Sp as validateDeploymentConfig,Ac as verifyAddressRecord,CS as verifyStaticApiOrigin};

package/dist/dns/index.js

@@ -1 +1 @@
-import{at,le,Me,M,Mt,Ln,ws,Rs,hr,Ar,$n,yr,Ds,Ps,Ns,ks,X,Bs,xs,Os,_s,ue,Ls,$s,Ms,D,pc,Mn,mc}from"../chunk-j6fsxq8q.js";import"../chunk-97gre81w.js";import"../chunk-cgcthvq9.js";export{M as CloudflareProvider,Mn as DnsProviderFactory,Me as GoDaddyProvider,at as PROXIABLE_RECORD_TYPES,le as PorkbunProvider,X as Route53Provider,ue as UnifiedDnsValidator,Ns as applyDeclaredZoneSettings,Os as applyZoneMigration,D as createDnsProvider,$s as createGoDaddyValidator,Ls as createPorkbunValidator,Ms as createRoute53Validator,yr as delegateZone,Ds as delegateZoneFromConfig,Ps as describeDelegation,ks as describeZoneSettings,pc as detectDnsProvider,mc as dnsProviders,Bs as exportRoute53Zone,hr as isNameserverRegistrar,Ar as isZoneHost,xs as planZoneMigration,Mt as policyTag,Ln as qualifyName,Rs as reconcileDeclaredRecords,ws as resolveDeclaredRecords,$n as sameNameservers,_s as verifyZoneParity};
+import{at,le,Me,M,Mt,Ln,Ds,Ps,hr,Ar,$n,yr,Ns,ks,Bs,xs,X,Os,_s,Ls,$s,ue,Ms,Fs,Us,D,pc,Mn,mc}from"../chunk-gp9tkznp.js";import"../chunk-97gre81w.js";import"../chunk-cgcthvq9.js";export{M as CloudflareProvider,Mn as DnsProviderFactory,Me as GoDaddyProvider,at as PROXIABLE_RECORD_TYPES,le as PorkbunProvider,X as Route53Provider,ue as UnifiedDnsValidator,Bs as applyDeclaredZoneSettings,Ls as applyZoneMigration,D as createDnsProvider,Fs as createGoDaddyValidator,Ms as createPorkbunValidator,Us as createRoute53Validator,yr as delegateZone,Ns as delegateZoneFromConfig,ks as describeDelegation,xs as describeZoneSettings,pc as detectDnsProvider,mc as dnsProviders,Os as exportRoute53Zone,hr as isNameserverRegistrar,Ar as isZoneHost,_s as planZoneMigration,Mt as policyTag,Ln as qualifyName,Ps as reconcileDeclaredRecords,Ds as resolveDeclaredRecords,$n as sameNameservers,$s as verifyZoneParity};

package/dist/drivers/factory.d.ts

@@ -1,7 +1,7 @@
-import type { CloudConfig, CloudDriver, CloudProviderName } from '@ts-cloud/core';
+import type { CloudConfig, CloudDriver, DeployProviderName } from '@ts-cloud/core';
 export interface CreateCloudDriverOptions {
     config: CloudConfig;
-    provider?: CloudProviderName;
+    provider?: DeployProviderName;
 }
 /**
  * Create a cloud infrastructure driver from configuration.
@@ -16,6 +16,6 @@ export declare function createCloudDriver(options: CreateCloudDriverOptions): Cl
  */
 export declare class CloudDriverFactory {
     private drivers;
-    getDriver(config: CloudConfig, provider?: CloudProviderName): CloudDriver;
+    getDriver(config: CloudConfig, provider?: DeployProviderName): CloudDriver;
 }
 export declare const cloudDrivers: CloudDriverFactory;

package/dist/drivers/index.js

@@ -1 +1 @@
-import{Qn,Ft,Ir,Ut,Hn,Gn,Vn,qn,fg,yc,Y,Er,gh,jn,Sc,Ee,ve,Fe,x,vr,zn,Tr,pe,Ic,Kn,bc,Wn,Cc,wr,ph,mh,yg,Sg,fh,hh,Ah,Rr,Jn,Ig,Qs,Xn,Yn,Zn,ei,ti,Ec,vc,Dr,wc,Ue,Z,Rc,ct,Qe,He,dt,Te,Hs,Dc,bg,Cg,Pc,Eg,lt,ri,Nc,vg,Tg,kc,Pr,we,Bc,wg,Rg,Gs,ni,ut,Dg,Pg,Ng,kg,Bg,xg,Og,_g,Lg,ii,si,oi,ai,ci,di,li,$g,Mg,Nr,O,Vs,Fg,Ug,Qg,xc,Hg,Gg,yh,Oc,Sh,Ih,Vg,qg,bh,Ch,Eh,_c,jg,vh,Th,wh,ui,gi,pi,mi,Lc,$c,Mc,Fc,Rh,zs,Hc,hi,Gc,zg,Kg,Wg,Dh}from"../chunk-nqb7yefs.js";import"../chunk-fwcf0n8f.js";import"../chunk-9e4afej1.js";import"../chunk-bwtxb2hf.js";import"../chunk-cgcthvq9.js";import"../chunk-xejwnb6f.js";import"../chunk-bj4kvqwz.js";import"../chunk-my61jkg1.js";export{Fc as AwsBoxProvisioner,vr as AwsDriver,Qg as BOOT_PARTITION_LABEL,Vs as CloudDriverFactory,Sg as DEFAULT_HOST_CLEANUP_ESCALATED,hh as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,fh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,yg as DEFAULT_HOST_CLEANUP_RETENTION,Ah as DEFAULT_HOST_CLEANUP_SCHEDULE,Gn as DEFAULT_RPX_CERTS_DIR,Ug as FIRST_BOOT_SCRIPT_PATH,wr as HOST_ARTIFACT_CACHE_DIR,ph as HOST_CLEANUP_SCRIPT_PATH,mh as HOST_CLEANUP_UNIT,Mc as HetznerBoxProvisioner,Dr as HetznerClient,Te as HetznerDriver,Rc as LEGACY_DRIVER_STATE_DIR,Hs as LocalBoxDriver,Kg as MANAGED_CACHE_POLICY_DISABLED,zg as MANAGED_CACHE_POLICY_OPTIMIZED,Wg as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,Rg as RASPBERRY_PI_DEFAULT_SWAP_GB,Cc as REMOTE_SCRIPT_RUNNER,jn as RPX_DIR,Sc as RPX_LAUNCHER_PATH,Ee as RPX_SERVICE_NAME,Bc as SSH_BOOTSTRAP_MARKER_DIR,we as SSH_BOOTSTRAP_VERSION,ut as SSH_DEFAULTS,li as SSH_DEPLOY_STORAGE_PATH,bg as SSH_INSECURE_HOST_KEY_OPTS,Cg as SSH_KEEPALIVE_OPTS,si as SSH_PREFLIGHT_SCRIPT,$g as SSH_SKIP_BOOTSTRAP_ENV,Nr as SshDriver,Pr as SystemSshTransport,Lc as UBUNTU_2404_AMI_PARAM,wh as acquireResizeLock,bh as applyHetznerHostOptimization,Gs as assertArchSupported,Mg as assertSshComputeConfig,Ec as buildAwsArtifactFetch,$c as buildBoxUserData,Dh as buildCloudFrontOriginConfig,xc as buildCloudInitFirstBoot,qg as buildHetznerHostOptimizationScript,Xn as buildHostCleanupDeployScript,Ig as buildHostCleanupExecutable,Qs as buildHostCleanupInstallScript,Jn as buildHostCleanupScript,vc as buildLocalArtifactFetch,Y as buildRpxConfig,Fe as buildRpxFragmentRefreshScript,Er as buildRpxLbConfig,ve as buildRpxProvisionScript,Eg as buildScpArgsFor,Zn as buildSiteDeployScript,zn as buildSshArgs,Pc as buildSshArgsFor,ni as buildSshBootstrapScript,ei as buildStaticSiteDeployScript,Fg as cloudDrivers,Ch as collectHetznerHostOptimizationReport,Oc as collectHetznerResizeManifest,Rh as createBoxProvisioner,O as createCloudDriver,Hc as deployAllComputeSites,zs as deploySiteRelease,yc as deriveRouteId,Qn as describeScriptSyntaxError,ct as driverStateDir,Qe as driverStatePath,gi as ensureFirewall,pi as ensureServer,ui as ensureSshKey,ai as evaluatePreflight,yh as executeHetznerServerResize,Tg as findKnownHostKey,di as formatPreflightFindings,Ft as formatSshFailure,qn as gatewayHostnames,x as generateUbuntuAppCloudInit,Vn as hasAutoWwwVariant,Dc as isBoxMode,Gg as isHetznerCapacityError,Hn as isLocalDatabase,vg as knownHostsLine,Nc as knownHostsToken,fg as normalizeRoutePath,Ue as normalizeSshPublicKey,oi as parsePreflightFacts,Hg as planHetznerServerResize,ci as preflightFailed,Sh as prepareHetznerResize,He as readDriverState,vh as readResizeCheckpoint,ti as releaseTarballTmpPath,hi as reloadRpxGateway,Wn as remoteScriptRunner,gh as renderRpxLauncher,Gc as renewRpxCertificates,_c as resizeCheckpointPath,jg as resizeLockPath,Yn as resolveExecStart,wc as resolveHetznerApiToken,Vg as resolveHetznerHostOptimizationPlan,Rr as resolveHostCleanupConfig,Bg as resolveSshHostKeyPolicy,Dg as resolveSshHosts,Lg as resolveSshLan,Ng as resolveSshPort,kg as resolveSshPrivateKeyPath,Og as resolveSshProfile,_g as resolveSshPublicIp,ii as resolveSshSettings,xg as resolveSshSudo,Pg as resolveSshUser,ri as scanHostKey,Ic as scpUpload,mi as serverPublicIpv4,wg as sshBootstrapMarkerPath,Tr as sshExec,pe as sshExecOrThrow,lt as sshHostKeyFingerprint,kc as sshKnownHostsPath,Ut as summarizeRemoteFailures,Ir as surfaceRemoteNotices,Eh as verifyHetznerHostOptimization,Ih as verifyHetznerResize,bc as waitForCloudInit,Kn as waitForSsh,Z as wrapCloudInitUserData,dt as writeDriverState,Th as writeResizeCheckpoint};
+import{Qn,Ft,Ir,Ut,Hn,Gn,Vn,qn,fg,yc,Y,Er,gh,jn,Sc,Ee,ve,Fe,x,vr,zn,Tr,pe,Ic,Kn,bc,Wn,Cc,wr,ph,mh,yg,Sg,fh,hh,Ah,Rr,Jn,Ig,Gs,Xn,Yn,Zn,ei,ti,Ec,vc,Dr,wc,Ue,Z,Rc,ct,Qe,He,dt,Te,Vs,Dc,bg,Cg,Pc,Eg,lt,ri,Nc,vg,Tg,kc,Pr,we,Bc,wg,Rg,qs,ni,ut,Dg,Pg,Ng,kg,Bg,xg,Og,_g,Lg,ii,si,oi,ai,ci,di,li,$g,Mg,Nr,O,js,Fg,Ug,Qg,xc,Hg,Gg,yh,Oc,Sh,Ih,Vg,qg,bh,Ch,Eh,_c,jg,vh,Th,wh,ui,gi,pi,mi,Lc,$c,Mc,Fc,Rh,Ws,Hc,hi,Gc,zg,Kg,Wg,Dh}from"../chunk-vv5fmmhr.js";import"../chunk-fwcf0n8f.js";import"../chunk-9e4afej1.js";import"../chunk-bwtxb2hf.js";import"../chunk-cgcthvq9.js";import"../chunk-hm6pwhne.js";import"../chunk-c5jyzyqw.js";import"../chunk-x2pxtfk0.js";export{Fc as AwsBoxProvisioner,vr as AwsDriver,Qg as BOOT_PARTITION_LABEL,js as CloudDriverFactory,Sg as DEFAULT_HOST_CLEANUP_ESCALATED,hh as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,fh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,yg as DEFAULT_HOST_CLEANUP_RETENTION,Ah as DEFAULT_HOST_CLEANUP_SCHEDULE,Gn as DEFAULT_RPX_CERTS_DIR,Ug as FIRST_BOOT_SCRIPT_PATH,wr as HOST_ARTIFACT_CACHE_DIR,ph as HOST_CLEANUP_SCRIPT_PATH,mh as HOST_CLEANUP_UNIT,Mc as HetznerBoxProvisioner,Dr as HetznerClient,Te as HetznerDriver,Rc as LEGACY_DRIVER_STATE_DIR,Vs as LocalBoxDriver,Kg as MANAGED_CACHE_POLICY_DISABLED,zg as MANAGED_CACHE_POLICY_OPTIMIZED,Wg as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,Rg as RASPBERRY_PI_DEFAULT_SWAP_GB,Cc as REMOTE_SCRIPT_RUNNER,jn as RPX_DIR,Sc as RPX_LAUNCHER_PATH,Ee as RPX_SERVICE_NAME,Bc as SSH_BOOTSTRAP_MARKER_DIR,we as SSH_BOOTSTRAP_VERSION,ut as SSH_DEFAULTS,li as SSH_DEPLOY_STORAGE_PATH,bg as SSH_INSECURE_HOST_KEY_OPTS,Cg as SSH_KEEPALIVE_OPTS,si as SSH_PREFLIGHT_SCRIPT,$g as SSH_SKIP_BOOTSTRAP_ENV,Nr as SshDriver,Pr as SystemSshTransport,Lc as UBUNTU_2404_AMI_PARAM,wh as acquireResizeLock,bh as applyHetznerHostOptimization,qs as assertArchSupported,Mg as assertSshComputeConfig,Ec as buildAwsArtifactFetch,$c as buildBoxUserData,Dh as buildCloudFrontOriginConfig,xc as buildCloudInitFirstBoot,qg as buildHetznerHostOptimizationScript,Xn as buildHostCleanupDeployScript,Ig as buildHostCleanupExecutable,Gs as buildHostCleanupInstallScript,Jn as buildHostCleanupScript,vc as buildLocalArtifactFetch,Y as buildRpxConfig,Fe as buildRpxFragmentRefreshScript,Er as buildRpxLbConfig,ve as buildRpxProvisionScript,Eg as buildScpArgsFor,Zn as buildSiteDeployScript,zn as buildSshArgs,Pc as buildSshArgsFor,ni as buildSshBootstrapScript,ei as buildStaticSiteDeployScript,Fg as cloudDrivers,Ch as collectHetznerHostOptimizationReport,Oc as collectHetznerResizeManifest,Rh as createBoxProvisioner,O as createCloudDriver,Hc as deployAllComputeSites,Ws as deploySiteRelease,yc as deriveRouteId,Qn as describeScriptSyntaxError,ct as driverStateDir,Qe as driverStatePath,gi as ensureFirewall,pi as ensureServer,ui as ensureSshKey,ai as evaluatePreflight,yh as executeHetznerServerResize,Tg as findKnownHostKey,di as formatPreflightFindings,Ft as formatSshFailure,qn as gatewayHostnames,x as generateUbuntuAppCloudInit,Vn as hasAutoWwwVariant,Dc as isBoxMode,Gg as isHetznerCapacityError,Hn as isLocalDatabase,vg as knownHostsLine,Nc as knownHostsToken,fg as normalizeRoutePath,Ue as normalizeSshPublicKey,oi as parsePreflightFacts,Hg as planHetznerServerResize,ci as preflightFailed,Sh as prepareHetznerResize,He as readDriverState,vh as readResizeCheckpoint,ti as releaseTarballTmpPath,hi as reloadRpxGateway,Wn as remoteScriptRunner,gh as renderRpxLauncher,Gc as renewRpxCertificates,_c as resizeCheckpointPath,jg as resizeLockPath,Yn as resolveExecStart,wc as resolveHetznerApiToken,Vg as resolveHetznerHostOptimizationPlan,Rr as resolveHostCleanupConfig,Bg as resolveSshHostKeyPolicy,Dg as resolveSshHosts,Lg as resolveSshLan,Ng as resolveSshPort,kg as resolveSshPrivateKeyPath,Og as resolveSshProfile,_g as resolveSshPublicIp,ii as resolveSshSettings,xg as resolveSshSudo,Pg as resolveSshUser,ri as scanHostKey,Ic as scpUpload,mi as serverPublicIpv4,wg as sshBootstrapMarkerPath,Tr as sshExec,pe as sshExecOrThrow,lt as sshHostKeyFingerprint,kc as sshKnownHostsPath,Ut as summarizeRemoteFailures,Ir as surfaceRemoteNotices,Eh as verifyHetznerHostOptimization,Ih as verifyHetznerResize,bc as waitForCloudInit,Kn as waitForSsh,Z as wrapCloudInitUserData,dt as writeDriverState,Th as writeResizeCheckpoint};

package/dist/fly/client.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Fly.io API client, on the Machines REST API: apps, Machines, leases,
+ * volumes, secrets, IP assignments and certificates. Paths and payloads follow
+ * Fly's API reference and its own Go client (superfly/fly-go `flaps`), which
+ * flyctl itself uses - IP allocation and certificates moved there from the
+ * GraphQL API.
+ *
+ * @see https://docs.fly.io/machines/api/
+ */
+export declare const FLY_MACHINES_API = "https://api.machines.dev/v1";
+export declare class FlyApiError extends Error {
+    readonly status: number;
+    readonly path: string;
+    constructor(message: string, status: number, path: string);
+}
+export interface FlyApp {
+    id?: string;
+    name: string;
+    organization?: {
+        slug?: string;
+    };
+    status?: string;
+}
+export interface FlyService {
+    protocol: 'tcp' | 'udp';
+    internal_port: number;
+    ports: Array<{
+        port: number;
+        handlers: string[];
+        force_https?: boolean;
+    }>;
+    autostop?: 'off' | 'stop' | 'suspend';
+    autostart?: boolean;
+    min_machines_running?: number;
+    checks?: Array<{
+        type: 'http' | 'tcp';
+        interval?: string;
+        timeout?: string;
+        grace_period?: string;
+        method?: string;
+        path?: string;
+    }>;
+}
+export interface FlyMachineConfig {
+    image: string;
+    env?: Record<string, string>;
+    guest?: {
+        cpu_kind: 'shared' | 'performance';
+        cpus: number;
+        memory_mb: number;
+    };
+    services?: FlyService[];
+    mounts?: Array<{
+        volume: string;
+        path: string;
+    }>;
+    restart?: {
+        policy: 'no' | 'always' | 'on-failure';
+        max_retries?: number;
+    };
+    metadata?: Record<string, string>;
+}
+export interface FlyMachine {
+    id: string;
+    name?: string;
+    state: string;
+    region: string;
+    instance_id?: string;
+    config: FlyMachineConfig;
+}
+export interface FlyVolume {
+    id: string;
+    name: string;
+    region: string;
+    size_gb: number;
+    attached_machine_id?: string | null;
+    state?: string;
+}
+export type FlyIpType = 'v4' | 'v6' | 'shared_v4' | 'private_v6';
+export interface FlyIpAssignment {
+    ip: string;
+    region?: string;
+    shared?: boolean;
+    egress?: boolean;
+}
+/** The kind of a listed address, read as fly-go reads it. */
+export declare function flyIpType(assignment: FlyIpAssignment): FlyIpType;
+export interface FlyCertificate {
+    hostname: string;
+    configured?: boolean;
+    status?: string;
+    /** The records the hostname needs for the certificate to be issued. */
+    dns_requirements?: {
+        a?: string[];
+        aaaa?: string[];
+        cname?: string;
+        acme_challenge?: {
+            name: string;
+            target: string;
+        };
+    };
+}
+export interface FlyClientOptions {
+    /** `FLY_API_TOKEN`: a deploy or org token. */
+    token: string;
+    fetch?: typeof fetch;
+}
+export declare class FlyClient {
+    private readonly token;
+    private readonly fetch;
+    constructor(options: FlyClientOptions);
+    private rest;
+    /** The app, or null when there is none by that name. */
+    getApp(name: string): Promise<FlyApp | null>;
+    createApp(name: string, org: string): Promise<FlyApp>;
+    listMachines(app: string): Promise<FlyMachine[]>;
+    createMachine(app: string, input: {
+        region: string;
+        config: FlyMachineConfig;
+        name?: string;
+        min_secrets_version?: number;
+    }): Promise<FlyMachine>;
+    /** Update a Machine's config. `nonce` is the lease the update is made under. */
+    updateMachine(app: string, id: string, input: {
+        config: FlyMachineConfig;
+        min_secrets_version?: number;
+    }, nonce: string): Promise<FlyMachine>;
+    /** Take a Machine's lease, so no other deploy updates it meanwhile. Returns the nonce. */
+    acquireLease(app: string, id: string, ttlSeconds?: number): Promise<string>;
+    releaseLease(app: string, id: string, nonce: string): Promise<void>;
+    /** Wait for a Machine to reach a state, up to `timeoutSeconds` (Fly allows up to 60 per call). */
+    waitForState(app: string, id: string, state: 'started' | 'stopped', options?: {
+        instanceId?: string;
+        timeoutSeconds?: number;
+    }): Promise<void>;
+    listVolumes(app: string): Promise<FlyVolume[]>;
+    createVolume(app: string, input: {
+        name: string;
+        region: string;
+        size_gb: number;
+    }): Promise<FlyVolume>;
+    /**
+     * Set secrets, leaving the app's others alone. Returns the secrets version,
+     * which a Machine created or updated after it must be given as
+     * `min_secrets_version` to be sure of seeing them.
+     */
+    setSecrets(app: string, values: Record<string, string>): Promise<number>;
+    listIpAssignments(app: string): Promise<FlyIpAssignment[]>;
+    /** Assign an address. A shared IPv4 is the organization's, shared with its other apps. */
+    assignIp(app: string, type: 'v6' | 'shared_v4' | 'v4'): Promise<FlyIpAssignment>;
+    /** Request a Let's Encrypt certificate for a custom hostname, or report the one requested before. */
+    requestCertificate(app: string, hostname: string): Promise<FlyCertificate>;
+}

package/dist/fly/deploy.d.ts

@@ -0,0 +1,72 @@
+import type { CloudConfig } from '@ts-cloud/core';
+import type { FlyCertificate, FlyClient, FlyIpAssignment, FlyMachineConfig } from './client';
+/**
+ * Deploy an app to Fly.io Machines (stacksjs/stacks#1044).
+ *
+ * A Fly app runs a container image on Machines: there is no box to provision
+ * and nothing to reach over SSH. A deploy converges the app on the config:
+ *
+ *   1. the app exists in the organization
+ *   2. the app's secrets are set, and their version noted, so every Machine
+ *      started or updated after this sees them
+ *   3. it has a dedicated IPv6 and a shared IPv4, so `<app>.fly.dev` answers
+ *   4. each configured region runs `count` Machines on the new image: an
+ *      existing one is updated in place under its lease and waited on before
+ *      the next, so a rollout that fails stops with the rest still serving; a
+ *      missing one is created, with its own volume when one is configured
+ *   5. each custom hostname has a certificate requested
+ *
+ * It never destroys anything. Machines beyond the configured count, or in a
+ * region no longer configured, are reported, not removed: a Machine can hold
+ * the only copy of a volume's data.
+ */
+export interface FlyDeployOptions {
+    app: string;
+    org: string;
+    /** The image to run, already pushed: `registry.fly.io/<app>:<tag>`. */
+    image: string;
+    regions: string[];
+    count: number;
+    internalPort: number;
+    healthPath: string;
+    vm: {
+        cpuKind: 'shared' | 'performance';
+        cpus: number;
+        memoryMb: number;
+    };
+    volume?: {
+        name: string;
+        sizeGb: number;
+        path: string;
+    };
+    autoStop: boolean;
+    /** Plain environment, visible in the Machine config. */
+    env: Record<string, string>;
+    /** Set as Fly secrets: encrypted at rest and never in the Machine config. */
+    secrets: Record<string, string>;
+    hostnames: string[];
+    /** The release this deploy is of (a commit sha), recorded on each Machine. */
+    release: string;
+}
+export interface FlyDeployResult {
+    app: string;
+    url: string;
+    createdApp: boolean;
+    created: string[];
+    updated: string[];
+    /** Machines the config no longer accounts for, left running. */
+    untouched: string[];
+    ips: FlyIpAssignment[];
+    certificates: FlyCertificate[];
+}
+/** The deploy options a `cloud.provider: 'fly'` config describes, defaults filled in. */
+export declare function flyDeployOptions(config: CloudConfig, input: {
+    environment: string;
+    image: string;
+    release: string;
+    env?: Record<string, string>;
+    secrets?: Record<string, string>;
+}): FlyDeployOptions;
+/** The Machine config a deploy runs, before any volume is attached. */
+export declare function flyMachineConfig(options: FlyDeployOptions): FlyMachineConfig;
+export declare function deployToFly(client: FlyClient, options: FlyDeployOptions, log?: (line: string) => void): Promise<FlyDeployResult>;

package/dist/fly/index.d.ts

@@ -0,0 +1,2 @@
+export * from './client';
+export * from './deploy';

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export * from './api';
 export * from './control-plane';
 export * from './security';
 export * from './preview';
+export * from './fly';
 export * from './compose';
 export * from './release';
 export * from './runtime';