@stacksjs/ts-cloud 0.16.58 → 0.16.59

package/dist/chunk-zwckda2e.js

@@ -0,0 +1 @@
+import{qn,Lh}from"./chunk-ryce2n62.js";import"./chunk-w174jbbm.js";import"./chunk-tj3egckk.js";import"./chunk-1a7ms51t.js";export{qn as EmailClient,Lh as email};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{wn,Rn,Ku,ys,Wu,Ju,Xu,za,Yu,Zu,dh,eg,E,tg,Ss,Me,rg,ng,$S,ig,sg,og,ag,cg,lh,MS,FS,US,uh,gh,QS,HS,ph,mh,GS,Is,Ar,Ka,Dn,Pn,yr,ct,Lt,bs,fh,kn,dg,lg,Wa,Es,Bn,vs,dc}from"../chunk-4f0b21fp.js";import{lc,xn,On,Ts,ws,Rs,Ds,uc,gc}from"../chunk-94z7s8ky.js";import{pc}from"../chunk-hybz2q8w.js";import"../chunk-nhsefr22.js";import"../chunk-qyr5hn6v.js";import"../chunk-stc3ykm3.js";import"../chunk-vgtqd3sb.js";import"../chunk-mp2y4t6w.js";import"../chunk-smt4t6rc.js";import"../chunk-y7k5872m.js";import{Dg,kc,Pg,De,Nc,Wn,kg,Bc,rd,no,nd,Jt,vi,io}from"../chunk-y2dej583.js";import"../chunk-yt8qgn5d.js";import"../chunk-80bgb48v.js";import"../chunk-d245va6b.js";import"../chunk-jyvnfny6.js";import"../chunk-e42gpavb.js";import{It,AA,md,ki,Ni,Bi,Mp}from"../chunk-apj1eqcy.js";import{U,Vr,qr,fd,po,d,yA,Fp,Up,CI,EI}from"../chunk-2hma3g5q.js";import"../chunk-430acqjk.js";import"../chunk-zvcd6x45.js";import"../chunk-a99wz633.js";export{AA as DEFAULT_SITE_PORT_RANGE,It as HOST_SITES_DIR,Nc as IPV6_EXCLUDED_HOST_LABELS,rd as MANAGEMENT_DASHBOARD_SITE,wn as addSiteToCloudConfig,Mp as allocateSitePorts,GS as buildAndPushContainerImage,pc as buildAndPushServerlessImage,Ar as buildFunctionEnv,Ni as buildHostSitePortsScript,io as buildManagementDashboardArtifact,Lt as buildServerTopology,bs as buildServerlessTopology,fh as buildTopology,Wa as collectEgressMetrics,Dg as collectServerDnsDomains,mh as createContainerImageDependencies,uh as createExistingStaticFullStackDependencies,lh as createStaticApiOriginDependencies,Bn as dashboardActions,no as dashboardCredentialsFile,rg as dashboardPageRoutes,ag as deleteFailoverReplicaBuckets,uc as deleteStaticSite,QS as deployExistingStaticFullStack,Ka as deployServerlessApp,EI as deployShipsFiles,cg as deploySite,MS as deployStaticApiOrigin,ws as deployStaticSite,gc as deployStaticSiteFull,xn as deployStaticSiteWithExternalDns,On as deployStaticSiteWithExternalDnsFull,dg as egressReportMetrics,E as ensureDashboardActor,ig as ensureFailoverReplicaBuckets,vi as ensureManagementDashboard,HS as estimateExistingStaticFullStackMonthlyCost,US as estimateStaticApiOriginMonthlyCost,lg as fetchEgressReport,gh as generateExistingStaticFullStackTemplate,lc as generateExternalDnsStaticSiteTemplate,Ts as generateStaticSiteTemplate,sg as grantFailoverReplicaAccess,yA as hasComputeConfigured,fd as hasProxyUpstream,ph as hashContainerContext,Wn as hostAcceptsIpv6,Is as infraEnvFromOutputs,tg as initializeDashboardControlPlane,Ds as invalidateCache,Vr as isPhpSite,za as isValidHostname,De as normalizePublicIpv6,ki as occupiedHostPorts,Bi as parseHostSiteFragments,md as parseUpstreamPort,kg as reconcileAddressRecords,Dn as redeployServerlessApp,Pg as removeAddressRecords,Rn as removeSiteFromCloudConfig,kc as removeStaleServerAddressRecords,Yu as renderAliasesValue,Xu as renderEnvValue,Zu as renderRedirectsValue,dh as renderSiteSnippet,Wu as renderSslValue,Ju as renderStringValue,vs as resolveDashboardAction,nd as resolveDashboardAuth,kn as resolveDashboardData,ng as resolveLegacyDashboardRoute,qr as resolveProxyUpstreams,po as resolveSiteDeployTarget,d as resolveSiteKind,Jt as resolveUiSource,Pn as rollbackServerlessApp,$S as routesForDashboard,ct as runRemoteCommand,Es as sanitizeCloudConfig,og as seedFailoverReplicas,eg as setAttachToInCloudConfig,yr as setMaintenance,ys as setSitePropertyInCloudConfig,Up as shipsARelease,CI as shipsToBucket,U as siteInstallBase,dc as startLocalDashboardServer,Ss as synchronizeDashboardUsers,Me as trackDashboardOperation,Ku as updateSiteInCloudConfig,Rs as uploadStaticFiles,Fp as validateDeploymentConfig,Bc as verifyAddressRecord,FS as verifyStaticApiOrigin};
+import{Rn,Dn,Wu,Ss,Ju,Xu,Yu,Wa,Zu,eg,fh,tg,v,rg,Is,Me,ng,ig,VS,sg,og,ag,cg,dg,hh,qS,jS,zS,Ah,yh,KS,WS,Sh,Ih,JS,bs,Ir,Ja,Pn,kn,br,ct,Mt,Cs,bh,Nn,lg,ug,Xa,vs,xn,Ts,uc}from"../chunk-za23j2mq.js";import{gc,On,_n,ws,Rs,Ds,Ps,pc,mc}from"../chunk-qdaj5yyh.js";import{fc}from"../chunk-cwqqv7dx.js";import"../chunk-yece1kc4.js";import"../chunk-ryce2n62.js";import"../chunk-jg2m713e.js";import"../chunk-dp0hvmd0.js";import"../chunk-pqyv47m4.js";import"../chunk-qb8cf1ss.js";import"../chunk-w174jbbm.js";import{Pg,Bc,kg,De,xc,Jn,Ng,Oc,nd,so,id,Zt,Ti,oo}from"../chunk-7bzyjfb1.js";import"../chunk-y9q6sv2q.js";import"../chunk-mkvqcd3x.js";import"../chunk-3h5vgz4z.js";import"../chunk-tj3egckk.js";import"../chunk-1a7ms51t.js";import{Ct,vA,fd,Ni,Bi,xi,Vp}from"../chunk-x6a2e5sx.js";import{U,qr,jr,hd,fo,d,TA,qp,jp,PI,kI}from"../chunk-c87bg8wk.js";import"../chunk-b1v1301e.js";import"../chunk-z5as1fa7.js";import"../chunk-j2bpd2v9.js";export{vA as DEFAULT_SITE_PORT_RANGE,Ct as HOST_SITES_DIR,xc as IPV6_EXCLUDED_HOST_LABELS,nd as MANAGEMENT_DASHBOARD_SITE,Rn as addSiteToCloudConfig,Vp as allocateSitePorts,JS as buildAndPushContainerImage,fc as buildAndPushServerlessImage,Ir as buildFunctionEnv,Bi as buildHostSitePortsScript,oo as buildManagementDashboardArtifact,Mt as buildServerTopology,Cs as buildServerlessTopology,bh as buildTopology,Xa as collectEgressMetrics,Pg as collectServerDnsDomains,Ih as createContainerImageDependencies,Ah as createExistingStaticFullStackDependencies,hh as createStaticApiOriginDependencies,xn as dashboardActions,so as dashboardCredentialsFile,ng as dashboardPageRoutes,cg as deleteFailoverReplicaBuckets,pc as deleteStaticSite,KS as deployExistingStaticFullStack,Ja as deployServerlessApp,kI as deployShipsFiles,dg as deploySite,qS as deployStaticApiOrigin,Rs as deployStaticSite,mc as deployStaticSiteFull,On as deployStaticSiteWithExternalDns,_n as deployStaticSiteWithExternalDnsFull,lg as egressReportMetrics,v as ensureDashboardActor,sg as ensureFailoverReplicaBuckets,Ti as ensureManagementDashboard,WS as estimateExistingStaticFullStackMonthlyCost,zS as estimateStaticApiOriginMonthlyCost,ug as fetchEgressReport,yh as generateExistingStaticFullStackTemplate,gc as generateExternalDnsStaticSiteTemplate,ws as generateStaticSiteTemplate,og as grantFailoverReplicaAccess,TA as hasComputeConfigured,hd as hasProxyUpstream,Sh as hashContainerContext,Jn as hostAcceptsIpv6,bs as infraEnvFromOutputs,rg as initializeDashboardControlPlane,Ps as invalidateCache,qr as isPhpSite,Wa as isValidHostname,De as normalizePublicIpv6,Ni as occupiedHostPorts,xi as parseHostSiteFragments,fd as parseUpstreamPort,Ng as reconcileAddressRecords,Pn as redeployServerlessApp,kg as removeAddressRecords,Dn as removeSiteFromCloudConfig,Bc as removeStaleServerAddressRecords,Zu as renderAliasesValue,Yu as renderEnvValue,eg as renderRedirectsValue,fh as renderSiteSnippet,Ju as renderSslValue,Xu as renderStringValue,Ts as resolveDashboardAction,id as resolveDashboardAuth,Nn as resolveDashboardData,ig as resolveLegacyDashboardRoute,jr as resolveProxyUpstreams,fo as resolveSiteDeployTarget,d as resolveSiteKind,Zt as resolveUiSource,kn as rollbackServerlessApp,VS as routesForDashboard,ct as runRemoteCommand,vs as sanitizeCloudConfig,ag as seedFailoverReplicas,tg as setAttachToInCloudConfig,br as setMaintenance,Ss as setSitePropertyInCloudConfig,jp as shipsARelease,PI as shipsToBucket,U as siteInstallBase,uc as startLocalDashboardServer,Is as synchronizeDashboardUsers,Me as trackDashboardOperation,Wu as updateSiteInCloudConfig,Ds as uploadStaticFiles,qp as validateDeploymentConfig,Oc as verifyAddressRecord,jS as verifyStaticApiOrigin};

package/dist/dns/index.js

@@ -1 +1 @@
-import{pt,he,Ge,H,qt,jn,$s,Ms,Tr,wr,zn,Rr,Fs,Us,Qs,Hs,ie,Gs,Vs,qs,js,Ae,zs,Ks,Ws,N,Dc,Kn,Pc}from"../chunk-smt4t6rc.js";import"../chunk-y7k5872m.js";import"../chunk-e42gpavb.js";export{H as CloudflareProvider,Kn as DnsProviderFactory,Ge as GoDaddyProvider,pt as PROXIABLE_RECORD_TYPES,he as PorkbunProvider,ie as Route53Provider,Ae as UnifiedDnsValidator,Qs as applyDeclaredZoneSettings,qs as applyZoneMigration,N as createDnsProvider,Ks as createGoDaddyValidator,zs as createPorkbunValidator,Ws as createRoute53Validator,Rr as delegateZone,Fs as delegateZoneFromConfig,Us as describeDelegation,Hs as describeZoneSettings,Dc as detectDnsProvider,Pc as dnsProviders,Gs as exportRoute53Zone,Tr as isNameserverRegistrar,wr as isZoneHost,Vs as planZoneMigration,qt as policyTag,jn as qualifyName,Ms as reconcileDeclaredRecords,$s as resolveDeclaredRecords,zn as sameNameservers,js as verifyZoneParity};
+import{pt,he,Ge,H,zt,zn,Ms,Fs,Dr,Pr,Kn,kr,Us,Qs,Hs,Gs,ie,Vs,qs,js,zs,Ae,Ks,Ws,Js,N,kc,Wn,Nc}from"../chunk-qb8cf1ss.js";import"../chunk-w174jbbm.js";import"../chunk-1a7ms51t.js";export{H as CloudflareProvider,Wn as DnsProviderFactory,Ge as GoDaddyProvider,pt as PROXIABLE_RECORD_TYPES,he as PorkbunProvider,ie as Route53Provider,Ae as UnifiedDnsValidator,Hs as applyDeclaredZoneSettings,js as applyZoneMigration,N as createDnsProvider,Ws as createGoDaddyValidator,Ks as createPorkbunValidator,Js as createRoute53Validator,kr as delegateZone,Us as delegateZoneFromConfig,Qs as describeDelegation,Gs as describeZoneSettings,kc as detectDnsProvider,Nc as dnsProviders,Vs as exportRoute53Zone,Dr as isNameserverRegistrar,Pr as isZoneHost,qs as planZoneMigration,zt as policyTag,zn as qualifyName,Fs as reconcileDeclaredRecords,Ms as resolveDeclaredRecords,Kn as sameNameservers,zs as verifyZoneParity};

package/dist/drivers/hetzner/client.d.ts

@@ -100,6 +100,12 @@ export interface HetznerFirewall {
     name: string;
     labels?: Record<string, string>;
     rules?: HetznerFirewallRule[];
+    applied_to?: Array<{
+        type: string;
+        server?: {
+            id: number;
+        };
+    }>;
 }
 export interface HetznerVolume {
     id: number;

package/dist/drivers/index.d.ts

@@ -36,6 +36,8 @@ export { ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4 } from './
 export type { EnsuredResource, EnsuredServer, EnsureFirewallOptions, EnsureServerOptions, EnsureSshKeyOptions, } from './hetzner/provision';
 export { buildSshArgs, REMOTE_SCRIPT_RUNNER, remoteScriptRunner, scpUpload, sshExec, sshExecOrThrow, waitForCloudInit, waitForSsh } from './shared/remote-exec';
 export type { RemoteExecOptions, RemoteExecResult, WaitOptions } from './shared/remote-exec';
+export { BOX_PANTRY_BIN_DIR, BOX_PANTRY_CLI_DIR, buildBoxConvergeScript, parseBoxReport, provisionBox, renderBoxUnit, renderEnvFile, } from './shared/box-converge';
+export type { BoxProvisionResult, ProvisionBoxOptions } from './shared/box-converge';
 export { AwsBoxProvisioner, buildBoxUserData, createBoxProvisioner, HetznerBoxProvisioner, UBUNTU_2404_AMI_PARAM, } from './shared/box-provision';
 export type { AwsBoxProvisionerOptions, BoxPort, BoxProviderName, BoxProvisioner, BoxSpec, CreateBoxProvisionerOptions, ProvisionedBox, } from './shared/box-provision';
 export { buildHostCleanupDeployScript, buildHostCleanupExecutable, buildHostCleanupInstallScript, DEFAULT_HOST_CLEANUP_ESCALATED, DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT, DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT, DEFAULT_HOST_CLEANUP_RETENTION, DEFAULT_HOST_CLEANUP_SCHEDULE, HOST_ARTIFACT_CACHE_DIR, HOST_CLEANUP_SCRIPT_PATH, HOST_CLEANUP_UNIT, resolveHostCleanupConfig, } from './shared/host-cleanup';

package/dist/drivers/index.js

@@ -1 +1 @@
-import{Jn,jt,Pr,zt,Xn,M,Br,Yn,Zn,xr,Or,Bh,xh,Lg,$g,Oh,_h,Lh,_r,ei,Mg,Ys,ti,ri,ni,ii,si,xc,Oc,oi,Lr,Se,_c,ai,Lc,ci,$c,$r,Fc,Ve,se,Zs,Fg,Uc,Qc,Hc,Gc,Vc,mt,qe,je,ft,di,li,Pe,eo,qc,Ug,Qg,jc,Hg,ht,ui,zc,Gg,Vg,Kc,Mr,ke,Wc,qg,jg,to,gi,At,zg,Kg,Wg,Jg,Xg,Yg,Zg,ep,tp,pi,mi,fi,hi,Ai,yi,Si,rp,np,Fr,F,ro,ip,sp,op,Jc,ap,cp,$h,Mh,Fh,Xc,dp,Uh,Qh,Hh,Ii,bi,Ci,Ei,Yc,Zc,ed,td,Gh,so,id,Ti,sd,lp,up,gp,Vh}from"../chunk-y2dej583.js";import{ao,lo,uo,qh,cd,B,Xt,bI,go,hp,ze,G,Ne}from"../chunk-yt8qgn5d.js";import"../chunk-80bgb48v.js";import"../chunk-d245va6b.js";import"../chunk-jyvnfny6.js";import"../chunk-e42gpavb.js";import"../chunk-2hma3g5q.js";import"../chunk-zvcd6x45.js";import"../chunk-a99wz633.js";export{td as AwsBoxProvisioner,Br as AwsDriver,op as BOOT_PARTITION_LABEL,ro as CloudDriverFactory,$g as DEFAULT_HOST_CLEANUP_ESCALATED,_h as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Oh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,Lg as DEFAULT_HOST_CLEANUP_RETENTION,Lh as DEFAULT_HOST_CLEANUP_SCHEDULE,ao as DEFAULT_RPX_CERTS_DIR,sp as FIRST_BOOT_SCRIPT_PATH,Or as HOST_ARTIFACT_CACHE_DIR,Bh as HOST_CLEANUP_SCRIPT_PATH,xh as HOST_CLEANUP_UNIT,ed as HetznerBoxProvisioner,$r as HetznerClient,Pe as HetznerDriver,Vc as LEGACY_DRIVER_STATE_DIR,eo as LocalBoxDriver,up as MANAGED_CACHE_POLICY_DISABLED,lp as MANAGED_CACHE_POLICY_OPTIMIZED,gp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,jg as RASPBERRY_PI_DEFAULT_SWAP_GB,$c as REMOTE_SCRIPT_RUNNER,go as RPX_DIR,hp as RPX_LAUNCHER_PATH,ze as RPX_SERVICE_NAME,Wc as SSH_BOOTSTRAP_MARKER_DIR,ke as SSH_BOOTSTRAP_VERSION,At as SSH_DEFAULTS,Si as SSH_DEPLOY_STORAGE_PATH,Ug as SSH_INSECURE_HOST_KEY_OPTS,Qg as SSH_KEEPALIVE_OPTS,mi as SSH_PREFLIGHT_SCRIPT,rp as SSH_SKIP_BOOTSTRAP_ENV,Fr as SshDriver,Mr as SystemSshTransport,Yc as UBUNTU_2404_AMI_PARAM,Hh as acquireResizeLock,$h as applyHetznerHostOptimization,li as applyHetznerVolumes,to as assertArchSupported,np as assertSshComputeConfig,xc as buildAwsArtifactFetch,Zc as buildBoxUserData,Vh as buildCloudFrontOriginConfig,Jc as buildCloudInitFirstBoot,Zn as buildComputeStorageInstallScript,xr as buildComputeStorageSiteScript,cp as buildHetznerHostOptimizationScript,ti as buildHostCleanupDeployScript,Mg as buildHostCleanupExecutable,Ys as buildHostCleanupInstallScript,ei as buildHostCleanupScript,Oc as buildLocalArtifactFetch,B as buildRpxConfig,Ne as buildRpxFragmentRefreshScript,Xt as buildRpxLbConfig,G as buildRpxProvisionScript,Hg as buildScpArgsFor,ni as buildSiteDeployScript,oi as buildSshArgs,jc as buildSshArgsFor,gi as buildSshBootstrapScript,ii as buildStaticSiteDeployScript,ip as cloudDrivers,Mh as collectHetznerHostOptimizationReport,Qc as collectHetznerResizeManifest,Gh as createBoxProvisioner,F as createCloudDriver,id as deployAllComputeSites,so as deploySiteRelease,cd as deriveRouteId,Jn as describeScriptSyntaxError,mt as driverStateDir,qe as driverStatePath,bi as ensureFirewall,Ci as ensureServer,Ii as ensureSshKey,hi as evaluatePreflight,Uc as executeHetznerServerResize,Vg as findKnownHostKey,yi as formatPreflightFindings,jt as formatSshFailure,uo as gatewayHostnames,M as generateUbuntuAppCloudInit,lo as hasAutoWwwVariant,qc as isBoxMode,Fg as isHetznerCapacityError,Xn as isLocalDatabase,Gg as knownHostsLine,zc as knownHostsToken,qh as normalizeRoutePath,Ve as normalizeSshPublicKey,fi as parsePreflightFacts,Zs as planHetznerServerResize,di as planHetznerVolumes,Ai as preflightFailed,Hc as prepareHetznerResize,je as readDriverState,Uh as readResizeCheckpoint,si as releaseTarballTmpPath,Ti as reloadRpxGateway,ci as remoteScriptRunner,bI as renderRpxLauncher,sd as renewRpxCertificates,Xc as resizeCheckpointPath,dp as resizeLockPath,Yn as resolveComputeVolumes,ri as resolveExecStart,Fc as resolveHetznerApiToken,ap as resolveHetznerHostOptimizationPlan,_r as resolveHostCleanupConfig,Xg as resolveSshHostKeyPolicy,zg as resolveSshHosts,tp as resolveSshLan,Wg as resolveSshPort,Jg as resolveSshPrivateKeyPath,Zg as resolveSshProfile,ep as resolveSshPublicIp,pi as resolveSshSettings,Yg as resolveSshSudo,Kg as resolveSshUser,ui as scanHostKey,_c as scpUpload,Ei as serverPublicIpv4,qg as sshBootstrapMarkerPath,Lr as sshExec,Se as sshExecOrThrow,ht as sshHostKeyFingerprint,Kc as sshKnownHostsPath,zt as summarizeRemoteFailures,Pr as surfaceRemoteNotices,Fh as verifyHetznerHostOptimization,Gc as verifyHetznerResize,Lc as waitForCloudInit,ai as waitForSsh,se as wrapCloudInitUserData,ft as writeDriverState,Qh as writeResizeCheckpoint};
+import{Xn,Kt,Br,Wt,Yn,M,Or,Zn,ei,_r,Lr,Mh,Fh,$g,Mg,Uh,Qh,Hh,$r,ti,Fg,Zs,ri,ni,ii,si,oi,_c,Lc,ai,Mr,Se,$c,Yt,Mc,ci,Fc,Fr,Qc,Ve,se,eo,Ug,Hc,Gc,Vc,qc,jc,ft,qe,je,ht,di,li,Pe,to,zc,Qg,Hg,Kc,Gg,At,ui,Wc,Vg,qg,Jc,yt,ke,Xc,jg,zg,ro,gi,St,Kg,Wg,Jg,Xg,Yg,Zg,ep,tp,rp,pi,mi,fi,hi,Ai,yi,Si,np,ip,Ur,F,no,sp,op,ap,Yc,cp,dp,Gh,Vh,qh,Zc,lp,jh,zh,Kh,Ii,bi,Ci,Ei,ed,td,vi,rd,Wh,io,up,gp,pp,mp,fp,Jh,ao,sd,wi,od,hp,Ap,yp,Xh}from"../chunk-7bzyjfb1.js";import{lo,go,po,Yh,dd,B,er,DI,mo,Cp,ze,G,Ne}from"../chunk-y9q6sv2q.js";import"../chunk-mkvqcd3x.js";import"../chunk-3h5vgz4z.js";import"../chunk-tj3egckk.js";import"../chunk-1a7ms51t.js";import"../chunk-c87bg8wk.js";import"../chunk-z5as1fa7.js";import"../chunk-j2bpd2v9.js";export{rd as AwsBoxProvisioner,Or as AwsDriver,ap as BOOT_PARTITION_LABEL,up as BOX_PANTRY_BIN_DIR,io as BOX_PANTRY_CLI_DIR,no as CloudDriverFactory,Mg as DEFAULT_HOST_CLEANUP_ESCALATED,Qh as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Uh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,$g as DEFAULT_HOST_CLEANUP_RETENTION,Hh as DEFAULT_HOST_CLEANUP_SCHEDULE,lo as DEFAULT_RPX_CERTS_DIR,op as FIRST_BOOT_SCRIPT_PATH,Lr as HOST_ARTIFACT_CACHE_DIR,Mh as HOST_CLEANUP_SCRIPT_PATH,Fh as HOST_CLEANUP_UNIT,vi as HetznerBoxProvisioner,Fr as HetznerClient,Pe as HetznerDriver,jc as LEGACY_DRIVER_STATE_DIR,to as LocalBoxDriver,Ap as MANAGED_CACHE_POLICY_DISABLED,hp as MANAGED_CACHE_POLICY_OPTIMIZED,yp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,zg as RASPBERRY_PI_DEFAULT_SWAP_GB,Fc as REMOTE_SCRIPT_RUNNER,mo as RPX_DIR,Cp as RPX_LAUNCHER_PATH,ze as RPX_SERVICE_NAME,Xc as SSH_BOOTSTRAP_MARKER_DIR,ke as SSH_BOOTSTRAP_VERSION,St as SSH_DEFAULTS,Si as SSH_DEPLOY_STORAGE_PATH,Qg as SSH_INSECURE_HOST_KEY_OPTS,Hg as SSH_KEEPALIVE_OPTS,mi as SSH_PREFLIGHT_SCRIPT,np as SSH_SKIP_BOOTSTRAP_ENV,Ur as SshDriver,yt as SystemSshTransport,ed as UBUNTU_2404_AMI_PARAM,Kh as acquireResizeLock,Gh as applyHetznerHostOptimization,li as applyHetznerVolumes,ro as assertArchSupported,ip as assertSshComputeConfig,_c as buildAwsArtifactFetch,mp as buildBoxConvergeScript,td as buildBoxUserData,Xh as buildCloudFrontOriginConfig,Yc as buildCloudInitFirstBoot,ei as buildComputeStorageInstallScript,_r as buildComputeStorageSiteScript,dp as buildHetznerHostOptimizationScript,ri as buildHostCleanupDeployScript,Fg as buildHostCleanupExecutable,Zs as buildHostCleanupInstallScript,ti as buildHostCleanupScript,Lc as buildLocalArtifactFetch,B as buildRpxConfig,Ne as buildRpxFragmentRefreshScript,er as buildRpxLbConfig,G as buildRpxProvisionScript,Gg as buildScpArgsFor,ii as buildSiteDeployScript,ai as buildSshArgs,Kc as buildSshArgsFor,gi as buildSshBootstrapScript,si as buildStaticSiteDeployScript,sp as cloudDrivers,Vh as collectHetznerHostOptimizationReport,Gc as collectHetznerResizeManifest,Wh as createBoxProvisioner,F as createCloudDriver,sd as deployAllComputeSites,ao as deploySiteRelease,dd as deriveRouteId,Xn as describeScriptSyntaxError,ft as driverStateDir,qe as driverStatePath,bi as ensureFirewall,Ci as ensureServer,Ii as ensureSshKey,hi as evaluatePreflight,Hc as executeHetznerServerResize,qg as findKnownHostKey,yi as formatPreflightFindings,Kt as formatSshFailure,po as gatewayHostnames,M as generateUbuntuAppCloudInit,go as hasAutoWwwVariant,zc as isBoxMode,Ug as isHetznerCapacityError,Yn as isLocalDatabase,Vg as knownHostsLine,Wc as knownHostsToken,Yh as normalizeRoutePath,Ve as normalizeSshPublicKey,fp as parseBoxReport,fi as parsePreflightFacts,eo as planHetznerServerResize,di as planHetznerVolumes,Ai as preflightFailed,Vc as prepareHetznerResize,Jh as provisionBox,je as readDriverState,jh as readResizeCheckpoint,oi as releaseTarballTmpPath,wi as reloadRpxGateway,ci as remoteScriptRunner,pp as renderBoxUnit,gp as renderEnvFile,DI as renderRpxLauncher,od as renewRpxCertificates,Zc as resizeCheckpointPath,lp as resizeLockPath,Zn as resolveComputeVolumes,ni as resolveExecStart,Qc as resolveHetznerApiToken,cp as resolveHetznerHostOptimizationPlan,$r as resolveHostCleanupConfig,Yg as resolveSshHostKeyPolicy,Kg as resolveSshHosts,rp as resolveSshLan,Jg as resolveSshPort,Xg as resolveSshPrivateKeyPath,ep as resolveSshProfile,tp as resolveSshPublicIp,pi as resolveSshSettings,Zg as resolveSshSudo,Wg as resolveSshUser,ui as scanHostKey,$c as scpUpload,Ei as serverPublicIpv4,jg as sshBootstrapMarkerPath,Mr as sshExec,Se as sshExecOrThrow,At as sshHostKeyFingerprint,Jc as sshKnownHostsPath,Wt as summarizeRemoteFailures,Br as surfaceRemoteNotices,qh as verifyHetznerHostOptimization,qc as verifyHetznerResize,Mc as waitForCloudInit,Yt as waitForSsh,se as wrapCloudInitUserData,ht as writeDriverState,zh as writeResizeCheckpoint};

package/dist/drivers/shared/box-converge.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Declared boxes: a named machine, the pantry packages it needs, and its
+ * long-running processes as systemd units of an unprivileged account.
+ *
+ * `buildBoxConvergeScript` renders one idempotent bash script from a
+ * {@link BoxConfig}; `provisionBox` finds or creates the server, then runs it
+ * over SSH. Re-running converges: a package already installed is not
+ * reinstalled, a file that already has the declared content is not touched,
+ * and a running service is left running unless it asked to be restarted -
+ * a converge must never kill the CI job a runner is in the middle of.
+ *
+ * Packages go into pantry's fixed project ({@link PANTRY_PROJECT_DIR}) and are
+ * exposed to services through `<project>/pantry/.bin` on their PATH. The
+ * pantry CLI itself is installed off that PATH ({@link BOX_PANTRY_CLI_DIR}):
+ * a service such as a CI runner may treat "pantry is on PATH" as a cue to
+ * install a repository's own toolchain, and provisioning the box must not
+ * change that behaviour.
+ */
+import type { BoxConfig, BoxServiceConfig } from '@ts-cloud/core';
+import type { HetznerClient } from '../hetzner/client';
+import { type ProvisionedBox } from './box-provision';
+/** Where a box's pantry CLI lives: deliberately not on any service's PATH. */
+export declare const BOX_PANTRY_CLI_DIR = "/opt/pantry/cli";
+/** The PATH entry exposing pantry-installed packages to services. */
+export declare const BOX_PANTRY_BIN_DIR: string;
+/** Prefix of the lines a converge prints about what it changed. */
+export declare const BOX_REPORT_PREFIX = "ts-cloud:";
+/** An env file systemd reads: one `KEY="value"` per line, quotes and backslashes escaped. */
+export declare function renderEnvFile(environment: Record<string, string>): string;
+/** The systemd unit for one service. `%h` is the service user's home in a user unit. */
+export declare function renderBoxUnit(name: string, service: BoxServiceConfig, options: {
+    userUnit: boolean;
+}): string;
+/**
+ * One idempotent bash script that converges a box to its declaration. Runs as
+ * root. Prints a `ts-cloud:` line for each thing it changed or left for the
+ * operator to do.
+ */
+export declare function buildBoxConvergeScript(box: BoxConfig): string;
+/** The `ts-cloud:` lines a converge printed, without the prefix. */
+export declare function parseBoxReport(stdout: string): string[];
+export interface ProvisionBoxOptions {
+    box: BoxConfig;
+    client: HetznerClient;
+    /** OpenSSH public key authorized for root (reused if already registered). */
+    sshPublicKey: string;
+    /** The matching private key. */
+    identityFile: string;
+    /** Pins the box's host key on first contact and refuses a different one after. */
+    knownHostsFile: string;
+}
+export interface BoxProvisionResult {
+    box: ProvisionedBox;
+    /** What the converge changed or left to do, one line each. */
+    report: string[];
+}
+/** Find or create the box, then converge it over SSH. */
+export declare function provisionBox(options: ProvisionBoxOptions): Promise<BoxProvisionResult>;

package/dist/drivers/shared/box-converge.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/drivers/shared/package-manager.d.ts

@@ -57,6 +57,8 @@ export declare const PANTRY_PROJECT_DIR = "/opt/pantry";
 export interface PantryBootstrapOptions {
     /** Pin the pantry CLI version (e.g. `'0.9.39'`). @default latest release */
     version?: string;
+    /** Where to put the CLI. @default {@link PANTRY_INSTALL_DIR} */
+    installDir?: string;
 }
 /**
  * Bootstrap or upgrade the `pantry` CLI on a server. Installs to