@stacksjs/ts-cloud 0.16.93 → 0.16.96

package/dist/{chunk-9f18pebj.js → chunk-z1087cap.js}

@@ -1,4 +1,4 @@
-import{C}from"./chunk-tpvmpmxj.js";import{se,Ie,B,be,Or}from"./chunk-zwayp7fz.js";import{A}from"./chunk-by7hejhg.js";import{Ge,I}from"./chunk-1087xz1v.js";import{o}from"./chunk-1psh3mhm.js";function Ec(t){let{bucketName:s,domain:c,aliases:e,certificateArn:g,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:a=!1,singlePageApp:d=!1,dynamicApp:m=!1,computeOriginDomain:w,computeOriginPort:F=3008,computeOriginId:R="app-compute",retainOnStackDelete:x=!1}=t,S=x?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},y=m&&!!w,T=y?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],O=y?["GET","HEAD"]:["GET","HEAD"],P={},E={};P.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},E.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},E.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},P.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let h;if(a&&y)h="InstallRootRedirectFunction",P[h]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+import{E}from"./chunk-p1agrrnq.js";import{oe,Ce,B,Ee,Or}from"./chunk-1kagq9vp.js";import{y}from"./chunk-cjqw4ns4.js";import{qe,b}from"./chunk-4afz3x6w.js";import{o}from"./chunk-byt4re1c.js";function vc(t){let{bucketName:s,domain:c,aliases:e,certificateArn:g,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:a=!1,singlePageApp:d=!1,dynamicApp:m=!1,computeOriginDomain:A,computeOriginPort:I=3008,computeOriginId:R="app-compute",retainOnStackDelete:x=!1}=t,S=x?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},h=m&&!!A,T=h?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],F=h?["GET","HEAD"]:["GET","HEAD"],P={},O={};P.S3Bucket={Type:"AWS::S3::Bucket",...S,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},O.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},O.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},P.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...S,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let w;if(a&&h)w="InstallRootRedirectFunction",P[w]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   var request = event.request;
   if (request.uri === '/' || request.uri === '') {
     return {
@@ -24,7 +24,7 @@ import{C}from"./chunk-tpvmpmxj.js";import{se,Ie,B,be,Or}from"./chunk-zwayp7fz.js
   }
 
   return request;
-}`}};let N={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},u=y?{Id:R,DomainName:w,CustomOriginConfig:{HTTPPort:F,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=y?R:`S3-${s}`,p={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:u?[u,N]:[N],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:T,CachedMethods:O,Compress:!0,...y?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...a&&h?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[h,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!a&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...y&&a?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:d?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(c&&g)p.Aliases=e&&e.length>0?e:[c],p.ViewerCertificate={AcmCertificateArn:g,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else p.ViewerCertificate={CloudFrontDefaultCertificate:!0};return P.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...a&&y&&h?[h]:[],...!a?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:p}},E.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},E.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},P.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},E.SiteUrl={Description:"Site URL",Value:c?`https://${c}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${c||s} (External DNS)`,Resources:P,Outputs:E}}async function Mn(t){let s=t.region||"us-east-1",c="us-east-1",e=t.domain,g=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new A("us-east-1"),a=new be("us-east-1"),d=null;if(!t.skipDnsVerification){d=B(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let n=await d.listRecords(e);if(!n.success){let l=n.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:g,message:`DNS provider '${d.name}' cannot manage domain ${e}: ${l}`}}console.log(`DNS provider '${d.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let m=t.certificateArn,R=e.split(".").length===2?`www.${e}`:void 0;if(!m){console.log(`Checking for existing SSL certificate for ${e}...`);let n=await a.findCertificateByDomain(e),l=!1;if(n&&n.Status==="ISSUED"){if(R&&n.SubjectAlternativeNames)l=n.SubjectAlternativeNames.includes(R)||n.SubjectAlternativeNames.some((b)=>b===`*.${e}`);else l=!0;if(l)m=n.CertificateArn,console.log(`Found existing certificate with www coverage: ${m}`);else console.log(`Existing certificate doesn't cover ${R}, requesting new one...`)}if(!m){if(!d)return{success:!1,stackName:i,bucket:g,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${R?` (including ${R})`:""}...`);let D=await new Ie(d,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:R?[R]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(D.status!=="issued")return{success:!1,stackName:i,bucket:g,message:`SSL certificate validation failed. Status: ${D.status}`};m=D.certificateArn,console.log(`Certificate issued: ${m}`)}}let x=!1,S;try{let n=await r.describeStacks({stackName:i});if(n.Stacks.length>0){let l=n.Stacks[0],b=l.StackStatus;if(b==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),x=!1;else if(b==="DELETE_COMPLETE")x=!1;else x=!0,S=(l.Outputs||[]).find((f)=>f.OutputKey==="BucketName")?.OutputValue}}catch(n){if(n.message?.includes("does not exist")||n.code==="ValidationError")x=!1;else throw n}let y=S||g;if(!x){let n=new o(s),l=new I,b=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let D=await l.listDistributions();for(let f of D)if((f.Aliases?.Items??[]).includes(e)){b=!0,console.log(`Found existing CloudFront distribution ${f.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let V=await l.getDistributionConfig(f.Id),U=Ge(V.DistributionConfig);if(U)return console.log(`Using existing S3 bucket: ${U}`),{success:!0,stackName:`existing-${f.Id}`,bucket:U,distributionId:f.Id,distributionDomain:f.DomainName,domain:e,certificateArn:m,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}catch{}if(!b)try{if((await n.headBucket(g)).exists){console.log(`Found orphaned S3 bucket ${g}, cleaning up...`);try{let f=n.emptyBucket(g).then(()=>n.deleteBucket(g)),v=new Promise((V,U)=>setTimeout(()=>U(Error("Bucket cleanup timeout")),30000));await Promise.race([f,v]),console.log(`Deleted orphaned S3 bucket ${g}`)}catch(f){console.log(`Note: Could not clean up S3 bucket: ${f.message}`);let v=Date.now().toString(36);y=`${g}-${v}`,console.log(`Using alternative bucket name: ${y}`)}}}catch{}}let O=Ec({bucketName:y,domain:e,aliases:R?[e,R]:[e],certificateArn:m,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),P=Object.entries(t.tags||{}).map(([n,l])=>({Key:n,Value:l}));if(P.push({Key:"ManagedBy",Value:"ts-cloud"}),P.push({Key:"Application",Value:t.siteName}),d)P.push({Key:"DnsProvider",Value:d.name});let E,h=!1;if(x){h=!0,console.log(`Updating CloudFormation stack: ${i}`);try{E=(await r.updateStack({stackName:i,templateBody:JSON.stringify(O),capabilities:["CAPABILITY_IAM"],tags:P})).StackId,console.log(`Update initiated, stack ID: ${E}`)}catch(n){if(n.message?.includes("No updates are to be performed")){let l=await r.describeStacks({stackName:i});E=l.Stacks[0].StackId;let b=l.Stacks[0]?.Outputs||[],D=(v)=>b.find((V)=>V.OutputKey===v)?.OutputValue,f=D("DistributionDomain");if(f)await W(d,e,f);return{success:!0,stackId:E,stackName:i,bucket:D("BucketName")||y,distributionId:D("DistributionId"),distributionDomain:f,domain:e,certificateArn:m,message:"Static site infrastructure is already up to date"}}else throw n}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${y}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${m}`),E=(await r.createStack({stackName:i,templateBody:JSON.stringify(O),capabilities:["CAPABILITY_IAM"],tags:P,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${E}`);console.log(`Waiting for stack to reach ${h?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,h?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(n){if(n.message?.includes("must be verified")||n.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let b=new I,D=await b.listDistributions();for(let f of D)if((f.Aliases?.Items??[]).includes(e)){console.log(`Found existing CloudFront distribution ${f.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let V=await b.getDistributionConfig(f.Id),U=Ge(V.DistributionConfig);if(U){console.log(`Using existing S3 bucket: ${U}`);let M=f.DomainName;if(M)await W(d,e,M);return{success:!0,stackName:`existing-${f.Id}`,bucket:U,distributionId:f.Id,distributionDomain:f.DomainName,domain:e,certificateArn:m,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}return console.log(`
+}`}};let N={Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},u=h?{Id:R,DomainName:A,CustomOriginConfig:{HTTPPort:I,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,k=h?R:`S3-${s}`,p={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:u?[u,N]:[N],DefaultCacheBehavior:{TargetOriginId:k,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:T,CachedMethods:F,Compress:!0,...h?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...a&&w?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[w,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!a&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...h&&a?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:d?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(c&&g)p.Aliases=e&&e.length>0?e:[c],p.ViewerCertificate={AcmCertificateArn:g,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else p.ViewerCertificate={CloudFrontDefaultCertificate:!0};return P.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...S,DependsOn:["S3Bucket","CloudFrontOAC",...a&&h&&w?[w]:[],...!a?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:p}},O.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},O.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},P.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...S,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},O.SiteUrl={Description:"Site URL",Value:c?`https://${c}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${c||s} (External DNS)`,Resources:P,Outputs:O}}async function Mn(t){let s=t.region||"us-east-1",c="us-east-1",e=t.domain,g=t.bucket||e.replace(/\./g,"-"),i=t.stackName||`${t.siteName}-static-site`,r=new y("us-east-1"),a=new Ee("us-east-1"),d=null;if(!t.skipDnsVerification){d=B(t.dnsProvider),console.log(`Verifying DNS provider can manage ${e}...`);let n=await d.listRecords(e);if(!n.success){let l=n.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:i,bucket:g,message:`DNS provider '${d.name}' cannot manage domain ${e}: ${l}`}}console.log(`DNS provider '${d.name}' verified for ${e}`)}else console.log(`Skipping DNS verification for ${e}`);let m=t.certificateArn,R=e.split(".").length===2?`www.${e}`:void 0;if(!m){console.log(`Checking for existing SSL certificate for ${e}...`);let n=await a.findCertificateByDomain(e),l=!1;if(n&&n.Status==="ISSUED"){if(R&&n.SubjectAlternativeNames)l=n.SubjectAlternativeNames.includes(R)||n.SubjectAlternativeNames.some((C)=>C===`*.${e}`);else l=!0;if(l)m=n.CertificateArn,console.log(`Found existing certificate with www coverage: ${m}`);else console.log(`Existing certificate doesn't cover ${R}, requesting new one...`)}if(!m){if(!d)return{success:!1,stackName:i,bucket:g,message:`No DNS provider available to validate SSL certificate for ${e}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${e}${R?` (including ${R})`:""}...`);let D=await new Ce(d,"us-east-1").findOrCreateCertificate({domainName:e,subjectAlternativeNames:R?[R]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(D.status!=="issued")return{success:!1,stackName:i,bucket:g,message:`SSL certificate validation failed. Status: ${D.status}`};m=D.certificateArn,console.log(`Certificate issued: ${m}`)}}let x=!1,S;try{let n=await r.describeStacks({stackName:i});if(n.Stacks.length>0){let l=n.Stacks[0],C=l.StackStatus;if(C==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),x=!1;else if(C==="DELETE_COMPLETE")x=!1;else x=!0,S=(l.Outputs||[]).find((f)=>f.OutputKey==="BucketName")?.OutputValue}}catch(n){if(n.message?.includes("does not exist")||n.code==="ValidationError")x=!1;else throw n}let h=S||g;if(!x){let n=new o(s),l=new b,C=!1;if(e)try{console.log(`Checking for existing CloudFront distributions with alias ${e}...`);let D=await l.listDistributions();for(let f of D)if((f.Aliases?.Items??[]).includes(e)){C=!0,console.log(`Found existing CloudFront distribution ${f.Id} with alias ${e}`),console.log("Reusing existing infrastructure for updates...");let V=await l.getDistributionConfig(f.Id),U=qe(V.DistributionConfig);if(U)return console.log(`Using existing S3 bucket: ${U}`),{success:!0,stackName:`existing-${f.Id}`,bucket:U,distributionId:f.Id,distributionDomain:f.DomainName,domain:e,certificateArn:m,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}catch{}if(!C)try{if((await n.headBucket(g)).exists){console.log(`Found orphaned S3 bucket ${g}, cleaning up...`);try{let f=n.emptyBucket(g).then(()=>n.deleteBucket(g)),v=new Promise((V,U)=>setTimeout(()=>U(Error("Bucket cleanup timeout")),30000));await Promise.race([f,v]),console.log(`Deleted orphaned S3 bucket ${g}`)}catch(f){console.log(`Note: Could not clean up S3 bucket: ${f.message}`);let v=Date.now().toString(36);h=`${g}-${v}`,console.log(`Using alternative bucket name: ${h}`)}}}catch{}}let F=vc({bucketName:h,domain:e,aliases:R?[e,R]:[e],certificateArn:m,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,passthroughUrls:t.passthroughUrls,singlePageApp:t.singlePageApp,dynamicApp:t.dynamicApp,computeOriginDomain:t.computeOriginDomain,computeOriginPort:t.computeOriginPort,computeOriginId:t.computeOriginId}),P=Object.entries(t.tags||{}).map(([n,l])=>({Key:n,Value:l}));if(P.push({Key:"ManagedBy",Value:"ts-cloud"}),P.push({Key:"Application",Value:t.siteName}),d)P.push({Key:"DnsProvider",Value:d.name});let O,w=!1;if(x){w=!0,console.log(`Updating CloudFormation stack: ${i}`);try{O=(await r.updateStack({stackName:i,templateBody:JSON.stringify(F),capabilities:["CAPABILITY_IAM"],tags:P})).StackId,console.log(`Update initiated, stack ID: ${O}`)}catch(n){if(n.message?.includes("No updates are to be performed")){let l=await r.describeStacks({stackName:i});O=l.Stacks[0].StackId;let C=l.Stacks[0]?.Outputs||[],D=(v)=>C.find((V)=>V.OutputKey===v)?.OutputValue,f=D("DistributionDomain");if(f)await W(d,e,f);return{success:!0,stackId:O,stackName:i,bucket:D("BucketName")||h,distributionId:D("DistributionId"),distributionDomain:f,domain:e,certificateArn:m,message:"Static site infrastructure is already up to date"}}else throw n}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${h}`),console.log(`Domain: ${e}`),console.log(`Certificate ARN: ${m}`),O=(await r.createStack({stackName:i,templateBody:JSON.stringify(F),capabilities:["CAPABILITY_IAM"],tags:P,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${O}`);console.log(`Waiting for stack to reach ${w?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,w?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(n){if(n.message?.includes("must be verified")||n.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let C=new b,D=await C.listDistributions();for(let f of D)if((f.Aliases?.Items??[]).includes(e)){console.log(`Found existing CloudFront distribution ${f.Id} with alias ${e}`),console.log("Using existing infrastructure despite account verification requirement...");let V=await C.getDistributionConfig(f.Id),U=qe(V.DistributionConfig);if(U){console.log(`Using existing S3 bucket: ${U}`);let M=f.DomainName;if(M)await W(d,e,M);return{success:!0,stackName:`existing-${f.Id}`,bucket:U,distributionId:f.Id,distributionDomain:f.DomainName,domain:e,certificateArn:m,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}return console.log(`
 ┌─────────────────────────────────────────────────────────────────────────────┐
 │  AWS ACCOUNT VERIFICATION REQUIRED                                          │
 ├─────────────────────────────────────────────────────────────────────────────┤
@@ -42,7 +42,7 @@ import{C}from"./chunk-tpvmpmxj.js";import{se,Ie,B,be,Or}from"./chunk-zwayp7fz.js
 │                                                                             │
 │  Verification typically takes 1-2 business days.                            │
 │  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:E,stackName:i,bucket:y,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:E,stackName:i,bucket:y,message:`Stack deployment failed: ${n.message}`}}let u=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(n)=>u.find((l)=>l.OutputKey===n)?.OutputValue,p=k("DistributionDomain");if(p&&d)console.log(`Creating DNS records via ${d.name}...`),await W(d,e,p);else if(p&&!d)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:E,stackName:i,bucket:k("BucketName")||y,distributionId:k("DistributionId"),distributionDomain:p,domain:e,certificateArn:m,message:"Static site infrastructure deployed successfully with external DNS"}}async function W(t,s,c){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof se){console.log(`Creating Route53 alias record for apex domain ${s} -> ${c}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:c});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created Route53 alias record: ${s} -> ${c}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${c}`);let a=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:c});if(!a.success)console.warn(`Warning: Could not create www Route53 alias: ${a.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${c}`);else console.log(`Created Route53 alias record: ${r} -> ${c}`)}else{try{let d=await t.listRecords(s,"A");if(d.success)for(let m of d.records){let w=m.name.replace(/\.$/,"");if(w===s||w==="")console.log(`Removing existing root A record (${m.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:m.content})}}catch(d){console.log(`Note: Could not check for conflicting A records: ${d instanceof Error?d.message:d}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${c}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:c,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created ALIAS record: ${s} -> ${c}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${c}`);let a=await t.upsertRecord(s,{name:r,type:"CNAME",content:c,ttl:600});if(!a.success)console.warn(`Warning: Could not create www DNS record: ${a.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${c}`);else console.log(`Created CNAME record: ${r} -> ${c}`)}else{console.log(`Creating CNAME record for ${s} -> ${c}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:c,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created CNAME record: ${s} -> ${c}`)}}async function Un(t){let{sourceDir:s,cleanBucket:c=!1,onProgress:e,...g}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Mn(g);if(!i.success)return i;if(c){e?.("clean","Cleaning old files from S3...");try{await new o(g.region||"us-east-1").emptyBucket(i.bucket)}catch(m){console.log(`Note: Could not clean bucket: ${m.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-zft558kj.js"),a=await r({sourceDir:s,bucket:i.bucket,region:g.region||"us-east-1",cacheControl:g.cacheControl,onProgress:(m,w,F)=>{e?.("upload",`${m}/${w}: ${F}`)}});if(a.errors.length>0)return{...i,success:!1,message:`Upload errors: ${a.errors.join(", ")}`,filesUploaded:a.uploaded};if(i.distributionId&&a.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:m}=await import("./chunk-zft558kj.js");await m(i.distributionId)}e?.("complete","Deployment complete!");let d=a.skipped>0?`Deployed ${a.uploaded} files (${a.skipped} unchanged) with external DNS`:`Deployed ${a.uploaded} files successfully with external DNS`;return{...i,filesUploaded:a.uploaded,filesSkipped:a.skipped,message:d}}function Os(t){let{bucketName:s,domain:c,certificateArn:e,hostedZoneId:g,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,a={},d={};a.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},d.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},d.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},a.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},a.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:O,stackName:i,bucket:h,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:O,stackName:i,bucket:h,message:`Stack deployment failed: ${n.message}`}}let u=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],k=(n)=>u.find((l)=>l.OutputKey===n)?.OutputValue,p=k("DistributionDomain");if(p&&d)console.log(`Creating DNS records via ${d.name}...`),await W(d,e,p);else if(p&&!d)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:O,stackName:i,bucket:k("BucketName")||h,distributionId:k("DistributionId"),distributionDomain:p,domain:e,certificateArn:m,message:"Static site infrastructure deployed successfully with external DNS"}}async function W(t,s,c){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof oe){console.log(`Creating Route53 alias record for apex domain ${s} -> ${c}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:c});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created Route53 alias record: ${s} -> ${c}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${c}`);let a=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:c});if(!a.success)console.warn(`Warning: Could not create www Route53 alias: ${a.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${c}`);else console.log(`Created Route53 alias record: ${r} -> ${c}`)}else{try{let d=await t.listRecords(s,"A");if(d.success)for(let m of d.records){let A=m.name.replace(/\.$/,"");if(A===s||A==="")console.log(`Removing existing root A record (${m.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:m.content})}}catch(d){console.log(`Note: Could not check for conflicting A records: ${d instanceof Error?d.message:d}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${c}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:c,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created ALIAS record: ${s} -> ${c}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${c}`);let a=await t.upsertRecord(s,{name:r,type:"CNAME",content:c,ttl:600});if(!a.success)console.warn(`Warning: Could not create www DNS record: ${a.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${c}`);else console.log(`Created CNAME record: ${r} -> ${c}`)}else{console.log(`Creating CNAME record for ${s} -> ${c}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:c,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${c}`);else console.log(`Created CNAME record: ${s} -> ${c}`)}}async function Un(t){let{sourceDir:s,cleanBucket:c=!1,onProgress:e,...g}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Mn(g);if(!i.success)return i;if(c){e?.("clean","Cleaning old files from S3...");try{await new o(g.region||"us-east-1").emptyBucket(i.bucket)}catch(m){console.log(`Note: Could not clean bucket: ${m.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-q1a389m2.js"),a=await r({sourceDir:s,bucket:i.bucket,region:g.region||"us-east-1",cacheControl:g.cacheControl,onProgress:(m,A,I)=>{e?.("upload",`${m}/${A}: ${I}`)}});if(a.errors.length>0)return{...i,success:!1,message:`Upload errors: ${a.errors.join(", ")}`,filesUploaded:a.uploaded};if(i.distributionId&&a.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:m}=await import("./chunk-q1a389m2.js");await m(i.distributionId)}e?.("complete","Deployment complete!");let d=a.skipped>0?`Deployed ${a.uploaded} files (${a.skipped} unchanged) with external DNS`:`Deployed ${a.uploaded} files successfully with external DNS`;return{...i,filesUploaded:a.uploaded,filesSkipped:a.skipped,message:d}}function _s(t){let{bucketName:s,domain:c,certificateArn:e,hostedZoneId:g,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,a={},d={};a.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},d.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},d.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},a.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},a.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   const request = event.request;
   var uri = request.uri;
 
@@ -56,5 +56,5 @@ import{C}from"./chunk-tpvmpmxj.js";import{se,Ie,B,be,Or}from"./chunk-zwayp7fz.js
   }
 
   return request;
-}`}};let m={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(c&&e)m.Aliases=[c],m.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else m.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(a.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:m}},d.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},d.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},a.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},c&&g)a.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:g,Name:c,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},a.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:g,Name:c,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},d.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${c||s}`,Resources:a,Outputs:d}}async function _s(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let u=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!u)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return Mn({siteName:t.siteName,region:t.region,domain:u,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",c="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let g=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new A(c),a=new C,d=new be("us-east-1"),m=new Or("us-east-1"),{hostedZoneId:w,certificateArn:F}=t;if(e&&!w){let u=await a.findHostedZoneForDomain(e);if(u)w=u.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:g,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!F&&w){let u=await d.findCertificateByDomain(e);if(u&&u.Status==="ISSUED")F=u.CertificateArn;else F=(await m.requestAndValidate({domainName:e,hostedZoneId:w,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let R=!1,x;try{let u=await r.describeStacks({stackName:i});if(u.Stacks.length>0){let k=u.Stacks[0],p=k.StackStatus;if(p==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),R=!1;else if(p==="DELETE_COMPLETE")R=!1;else R=!0,x=(k.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(u){if(u.message?.includes("does not exist")||u.code==="ValidationError")R=!1;else throw u}let S=x||g;if(!R){let u=new o(s),k=new I,p=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let n=await k.listDistributions();for(let l of n)if((l.Aliases?.Items??[]).includes(e)){p=!0,console.log(`Found existing CloudFront distribution ${l.Id} for ${e}`);let D=await k.getDistributionConfig(l.Id),f=Ge(D.DistributionConfig);if(f){let v=e.replace(/\./g,"-");if(!f.startsWith(v)&&!f.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${f}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${f}`),w&&l.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await a.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:C.CloudFrontHostedZoneId,TargetDNSName:l.DomainName,EvaluateTargetHealth:!1}),await a.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:C.CloudFrontHostedZoneId,TargetDNSName:l.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(V){console.log(`Note: Could not update Route53 records: ${V.message}`)}return{success:!0,stackName:`existing-${l.Id}`,bucket:f,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:F,message:"Using existing CloudFront distribution"}}}}catch{}if(w)try{let l=(await a.listResourceRecordSets({HostedZoneId:w})).ResourceRecordSets||[];for(let b of l)if(b.Name===`${e}.`&&(b.Type==="A"||b.Type==="AAAA")){if(b.AliasTarget){console.log(`Found orphaned Route53 ${b.Type} record for ${e}, cleaning up...`);try{await a.deleteRecord({HostedZoneId:w,RecordSet:b}),console.log(`Deleted orphaned Route53 ${b.Type} record for ${e}`)}catch(D){console.log(`Note: Could not delete Route53 record: ${D.message}`)}}}}catch{}}if(!p)try{if((await u.headBucket(g)).exists){console.log(`Found orphaned S3 bucket ${g}, cleaning up...`);try{let l=u.emptyBucket(g).then(()=>u.deleteBucket(g)),b=new Promise((D,f)=>setTimeout(()=>f(Error("Bucket cleanup timeout")),30000));await Promise.race([l,b]),console.log(`Deleted orphaned S3 bucket ${g}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let b=Date.now().toString(36);S=`${g}-${b}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let y=Os({bucketName:S,domain:e,certificateArn:F,hostedZoneId:w,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),T=Object.entries(t.tags||{}).map(([u,k])=>({Key:u,Value:k}));T.push({Key:"ManagedBy",Value:"ts-cloud"}),T.push({Key:"Application",Value:t.siteName});let O,P=!1;if(R){P=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${F||"not specified"}`);try{O=(await r.updateStack({stackName:i,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:T})).StackId,console.log(`Update initiated, stack ID: ${O}`)}catch(u){if(u.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});O=k.Stacks[0].StackId;let p=k.Stacks[0]?.Outputs||[],n=(l)=>p.find((b)=>b.OutputKey===l)?.OutputValue;return{success:!0,stackId:O,stackName:i,bucket:n("BucketName")||S,distributionId:n("DistributionId"),distributionDomain:n("DistributionDomain"),domain:e,certificateArn:F,message:"Static site infrastructure is already up to date"}}else throw u}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${F||"not specified"}`),console.log("Stack does not exist, creating..."),O=(await r.createStack({stackName:i,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:T,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${O}`);console.log(`Waiting for stack to reach ${P?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,P?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(u){if(u.message?.includes("must be verified")||u.message?.includes("Access denied for operation")||u.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new I;if(e)try{let p=await k.listDistributions();for(let n of p)if((n.Aliases?.Items??[]).includes(e)){console.log(`Found existing CloudFront distribution ${n.Id} with alias ${e}`);let b=await k.getDistributionConfig(n.Id),D=Ge(b.DistributionConfig);if(D)return console.log(`Using existing S3 bucket: ${D}`),{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:F,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let p=new o(s);if((await p.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await p.createBucket(S);await p.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await p.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let l=`OAC-${S}`;console.log(`Creating Origin Access Control: ${l}...`);let b=await k.findOrCreateOriginAccessControl(l);console.log(`Origin Access Control ${b.Id} ready`),console.log("Creating CloudFront distribution...");let D=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:b.Id,aliases:e?[e]:[],certificateArn:F,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${D.Id} created`),console.log("Updating S3 bucket policy...");let f=I.getS3BucketPolicyForCloudFront(S,D.ARN);if(await p.putBucketPolicy(S,f),console.log("S3 bucket policy updated"),e&&w){console.log(`Creating Route53 records for ${e}...`);try{await a.createAliasRecord({HostedZoneId:w,Name:e,Type:"A",TargetHostedZoneId:C.CloudFrontHostedZoneId,TargetDNSName:D.DomainName,EvaluateTargetHealth:!1}),await a.createAliasRecord({HostedZoneId:w,Name:e,Type:"AAAA",TargetHostedZoneId:C.CloudFrontHostedZoneId,TargetDNSName:D.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(v){console.log(`Note: Could not create Route53 records: ${v.message}`)}}return{success:!0,stackName:`direct-${D.Id}`,bucket:S,distributionId:D.Id,distributionDomain:D.DomainName,domain:e,certificateArn:F,message:"Static site infrastructure created via direct API calls"}}catch(p){return console.log(`Direct API creation failed: ${p.message}`),{success:!1,stackId:O,stackName:i,bucket:S,message:`Deployment failed: ${p.message}`}}}return{success:!1,stackId:O,stackName:i,bucket:S,message:`Stack deployment failed: ${u.message}`}}let h=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],N=(u)=>h.find((k)=>k.OutputKey===u)?.OutputValue;return{success:!0,stackId:O,stackName:i,bucket:N("BucketName")||S,distributionId:N("DistributionId"),distributionDomain:N("DistributionDomain"),domain:e,certificateArn:F,message:"Static site infrastructure deployed successfully"}}async function Ls(t){let{sourceDir:s,bucket:c,region:e,cacheControl:g="max-age=31536000, public",onProgress:i}=t,r=new o(e),{readdir:a}=await import("node:fs/promises"),{join:d,relative:m}=await import("node:path"),{createHash:w}=await import("node:crypto");async function F(h){let N=[],u=await a(h,{withFileTypes:!0});for(let k of u){let p=d(h,k.name);if(k.isDirectory())N.push(...await F(p));else N.push(p)}return N}function R(h){let N=h.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[N||""]||"application/octet-stream"}function x(h){return w("md5").update(h).digest("hex")}async function S(){let h=new Map,N;do{let u=await r.listObjects({bucket:c,maxKeys:1000,continuationToken:N});for(let k of u.objects){let p=k.ETag?.replace(/"/g,"")||"";h.set(k.Key,p)}N=u.nextContinuationToken}while(N);return h}let y=await F(s),T=[],O=0,P=0,E=await S();for(let h of y){let N=m(s,h),u=R(h),k=h.endsWith(".html")?"max-age=3600, public":g;try{let p=Buffer.from(await Bun.file(h).arrayBuffer()),n=x(p),l=E.get(N);if(l&&l===n){P++,i?.(O+P,y.length,N);continue}await r.putObject({bucket:c,key:N,body:p,contentType:u,cacheControl:k}),O++,i?.(O+P,y.length,N)}catch(p){T.push(`Failed to upload ${N}: ${p.message}`)}}return{uploaded:O,skipped:P,errors:T}}async function $s(t){return{invalidationId:(await new I().invalidateAll(t)).Id}}async function vc(t,s="us-east-1"){let c=new A(s);try{let r=((await c.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((a)=>a.OutputKey==="BucketName")?.OutputValue;if(r)await new o(s).emptyBucket(r)}catch{}await c.deleteStack(t);let e=await c.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function Tc(t){let{sourceDir:s,cleanBucket:c=!1,onProgress:e,...g}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await _s(g);if(!i.success)return i;if(c){e?.("clean","Cleaning old files from S3...");try{await new o(g.region||"us-east-1").emptyBucket(i.bucket)}catch(d){console.log(`Note: Could not clean bucket: ${d.message}`)}}e?.("upload","Uploading files to S3...");let r=await Ls({sourceDir:s,bucket:i.bucket,region:g.region||"us-east-1",cacheControl:g.cacheControl,onProgress:(d,m,w)=>{e?.("upload",`${d}/${m}: ${w}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await $s(i.distributionId);e?.("complete","Deployment complete!");let a=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:a}}
-export{Ec,Mn,Un,Os,_s,Ls,$s,vc,Tc};
+}`}};let m={Enabled:!0,DefaultRootObject:i,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${s}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${s}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${i}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${r}`,ErrorCachingMinTTL:300}]};if(c&&e)m.Aliases=[c],m.ViewerCertificate={AcmCertificateArn:e,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else m.ViewerCertificate={CloudFrontDefaultCertificate:!0};if(a.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:m}},d.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},d.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},a.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},c&&g)a.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:g,Name:c,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},a.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:g,Name:c,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},d.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${c||s}`,Resources:a,Outputs:d}}async function Ls(t){if(t.dnsProvider&&t.dnsProvider.provider!=="route53"){let u=t.domain||(t.subdomain&&t.baseDomain?`${t.subdomain}.${t.baseDomain}`:void 0);if(!u)return{success:!1,stackName:t.stackName||`${t.siteName}-static-site`,bucket:t.bucket||`${t.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return Mn({siteName:t.siteName,region:t.region,domain:u,bucket:t.bucket,certificateArn:t.certificateArn,stackName:t.stackName,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument,cacheControl:t.cacheControl,tags:t.tags,dnsProvider:t.dnsProvider})}let s=t.region||"us-east-1",c="us-east-1",e;if(t.domain)e=t.domain;else if(t.subdomain&&t.baseDomain)e=`${t.subdomain}.${t.baseDomain}`;let g=t.bucket||(e?e.replace(/\./g,"-"):`${t.siteName}-${Date.now()}`),i=t.stackName||`${t.siteName}-static-site`,r=new y(c),a=new E,d=new Ee("us-east-1"),m=new Or("us-east-1"),{hostedZoneId:A,certificateArn:I}=t;if(e&&!A){let u=await a.findHostedZoneForDomain(e);if(u)A=u.Id.replace("/hostedzone/","");else return{success:!1,stackName:i,bucket:g,message:`No Route53 hosted zone found for ${t.baseDomain||e}. Please create one first.`}}if(e&&!I&&A){let u=await d.findCertificateByDomain(e);if(u&&u.Status==="ISSUED")I=u.CertificateArn;else I=(await m.requestAndValidate({domainName:e,hostedZoneId:A,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let R=!1,x;try{let u=await r.describeStacks({stackName:i});if(u.Stacks.length>0){let k=u.Stacks[0],p=k.StackStatus;if(p==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await r.waitForStack(i,"stack-delete-complete"),R=!1;else if(p==="DELETE_COMPLETE")R=!1;else R=!0,x=(k.Outputs||[]).find((l)=>l.OutputKey==="BucketName")?.OutputValue}}catch(u){if(u.message?.includes("does not exist")||u.code==="ValidationError")R=!1;else throw u}let S=x||g;if(!R){let u=new o(s),k=new b,p=!1;if(e){try{console.log(`Checking for existing CloudFront distribution for ${e}...`);let n=await k.listDistributions();for(let l of n)if((l.Aliases?.Items??[]).includes(e)){p=!0,console.log(`Found existing CloudFront distribution ${l.Id} for ${e}`);let D=await k.getDistributionConfig(l.Id),f=qe(D.DistributionConfig);if(f){let v=e.replace(/\./g,"-");if(!f.startsWith(v)&&!f.includes(t.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${f}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${f}`),A&&l.DomainName)try{console.log(`Ensuring Route53 records exist for ${e}...`),await a.createAliasRecord({HostedZoneId:A,Name:e,Type:"A",TargetHostedZoneId:E.CloudFrontHostedZoneId,TargetDNSName:l.DomainName,EvaluateTargetHealth:!1}),await a.createAliasRecord({HostedZoneId:A,Name:e,Type:"AAAA",TargetHostedZoneId:E.CloudFrontHostedZoneId,TargetDNSName:l.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${e}`)}catch(V){console.log(`Note: Could not update Route53 records: ${V.message}`)}return{success:!0,stackName:`existing-${l.Id}`,bucket:f,distributionId:l.Id,distributionDomain:l.DomainName,domain:e,certificateArn:I,message:"Using existing CloudFront distribution"}}}}catch{}if(A)try{let l=(await a.listResourceRecordSets({HostedZoneId:A})).ResourceRecordSets||[];for(let C of l)if(C.Name===`${e}.`&&(C.Type==="A"||C.Type==="AAAA")){if(C.AliasTarget){console.log(`Found orphaned Route53 ${C.Type} record for ${e}, cleaning up...`);try{await a.deleteRecord({HostedZoneId:A,RecordSet:C}),console.log(`Deleted orphaned Route53 ${C.Type} record for ${e}`)}catch(D){console.log(`Note: Could not delete Route53 record: ${D.message}`)}}}}catch{}}if(!p)try{if((await u.headBucket(g)).exists){console.log(`Found orphaned S3 bucket ${g}, cleaning up...`);try{let l=u.emptyBucket(g).then(()=>u.deleteBucket(g)),C=new Promise((D,f)=>setTimeout(()=>f(Error("Bucket cleanup timeout")),30000));await Promise.race([l,C]),console.log(`Deleted orphaned S3 bucket ${g}`)}catch(l){console.log(`Note: Could not clean up S3 bucket: ${l.message}`);let C=Date.now().toString(36);S=`${g}-${C}`,console.log(`Using alternative bucket name: ${S}`)}}}catch{}}let h=_s({bucketName:S,domain:e,certificateArn:I,hostedZoneId:A,defaultRootObject:t.defaultRootObject,errorDocument:t.errorDocument}),T=Object.entries(t.tags||{}).map(([u,k])=>({Key:u,Value:k}));T.push({Key:"ManagedBy",Value:"ts-cloud"}),T.push({Key:"Application",Value:t.siteName});let F,P=!1;if(R){P=!0,console.log(`Updating CloudFormation stack: ${i}`),console.log(`Using existing bucket: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${I||"not specified"}`);try{F=(await r.updateStack({stackName:i,templateBody:JSON.stringify(h),capabilities:["CAPABILITY_IAM"],tags:T})).StackId,console.log(`Update initiated, stack ID: ${F}`)}catch(u){if(u.message?.includes("No updates are to be performed")){let k=await r.describeStacks({stackName:i});F=k.Stacks[0].StackId;let p=k.Stacks[0]?.Outputs||[],n=(l)=>p.find((C)=>C.OutputKey===l)?.OutputValue;return{success:!0,stackId:F,stackName:i,bucket:n("BucketName")||S,distributionId:n("DistributionId"),distributionDomain:n("DistributionDomain"),domain:e,certificateArn:I,message:"Static site infrastructure is already up to date"}}else throw u}}else console.log(`Creating CloudFormation stack: ${i}`),console.log(`Bucket name: ${S}`),console.log(`Domain: ${e||"not specified"}`),console.log(`Certificate ARN: ${I||"not specified"}`),console.log("Stack does not exist, creating..."),F=(await r.createStack({stackName:i,templateBody:JSON.stringify(h),capabilities:["CAPABILITY_IAM"],tags:T,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${F}`);console.log(`Waiting for stack to reach ${P?"stack-update-complete":"stack-create-complete"}...`);try{await r.waitForStack(i,P?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(u){if(u.message?.includes("must be verified")||u.message?.includes("Access denied for operation")||u.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let k=new b;if(e)try{let p=await k.listDistributions();for(let n of p)if((n.Aliases?.Items??[]).includes(e)){console.log(`Found existing CloudFront distribution ${n.Id} with alias ${e}`);let C=await k.getDistributionConfig(n.Id),D=qe(C.DistributionConfig);if(D)return console.log(`Using existing S3 bucket: ${D}`),{success:!0,stackName:`existing-${n.Id}`,bucket:D,distributionId:n.Id,distributionDomain:n.DomainName,domain:e,certificateArn:I,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let p=new o(s);if((await p.headBucket(S)).exists)console.log(`Using existing S3 bucket: ${S}`);else console.log(`Creating S3 bucket: ${S}...`),await p.createBucket(S);await p.putBucketWebsite(S,{IndexDocument:t.defaultRootObject||"index.html",ErrorDocument:t.errorDocument||"404.html"}),await p.putPublicAccessBlock(S,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${S} configured`);let l=`OAC-${S}`;console.log(`Creating Origin Access Control: ${l}...`);let C=await k.findOrCreateOriginAccessControl(l);console.log(`Origin Access Control ${C.Id} ready`),console.log("Creating CloudFront distribution...");let D=await k.createDistributionForS3({bucketName:S,bucketRegion:s,originAccessControlId:C.Id,aliases:e?[e]:[],certificateArn:I,defaultRootObject:t.defaultRootObject||"index.html",comment:`Distribution for ${e||S}`});console.log(`CloudFront distribution ${D.Id} created`),console.log("Updating S3 bucket policy...");let f=b.getS3BucketPolicyForCloudFront(S,D.ARN);if(await p.putBucketPolicy(S,f),console.log("S3 bucket policy updated"),e&&A){console.log(`Creating Route53 records for ${e}...`);try{await a.createAliasRecord({HostedZoneId:A,Name:e,Type:"A",TargetHostedZoneId:E.CloudFrontHostedZoneId,TargetDNSName:D.DomainName,EvaluateTargetHealth:!1}),await a.createAliasRecord({HostedZoneId:A,Name:e,Type:"AAAA",TargetHostedZoneId:E.CloudFrontHostedZoneId,TargetDNSName:D.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${e}`)}catch(v){console.log(`Note: Could not create Route53 records: ${v.message}`)}}return{success:!0,stackName:`direct-${D.Id}`,bucket:S,distributionId:D.Id,distributionDomain:D.DomainName,domain:e,certificateArn:I,message:"Static site infrastructure created via direct API calls"}}catch(p){return console.log(`Direct API creation failed: ${p.message}`),{success:!1,stackId:F,stackName:i,bucket:S,message:`Deployment failed: ${p.message}`}}}return{success:!1,stackId:F,stackName:i,bucket:S,message:`Stack deployment failed: ${u.message}`}}let w=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],N=(u)=>w.find((k)=>k.OutputKey===u)?.OutputValue;return{success:!0,stackId:F,stackName:i,bucket:N("BucketName")||S,distributionId:N("DistributionId"),distributionDomain:N("DistributionDomain"),domain:e,certificateArn:I,message:"Static site infrastructure deployed successfully"}}async function $s(t){let{sourceDir:s,bucket:c,region:e,cacheControl:g="max-age=31536000, public",onProgress:i}=t,r=new o(e),{readdir:a}=await import("node:fs/promises"),{join:d,relative:m}=await import("node:path"),{createHash:A}=await import("node:crypto");async function I(w){let N=[],u=await a(w,{withFileTypes:!0});for(let k of u){let p=d(w,k.name);if(k.isDirectory())N.push(...await I(p));else N.push(p)}return N}function R(w){let N=w.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[N||""]||"application/octet-stream"}function x(w){return A("md5").update(w).digest("hex")}async function S(){let w=new Map,N;do{let u=await r.listObjects({bucket:c,maxKeys:1000,continuationToken:N});for(let k of u.objects){let p=k.ETag?.replace(/"/g,"")||"";w.set(k.Key,p)}N=u.nextContinuationToken}while(N);return w}let h=await I(s),T=[],F=0,P=0,O=await S();for(let w of h){let N=m(s,w),u=R(w),k=w.endsWith(".html")?"max-age=3600, public":g;try{let p=Buffer.from(await Bun.file(w).arrayBuffer()),n=x(p),l=O.get(N);if(l&&l===n){P++,i?.(F+P,h.length,N);continue}await r.putObject({bucket:c,key:N,body:p,contentType:u,cacheControl:k}),F++,i?.(F+P,h.length,N)}catch(p){T.push(`Failed to upload ${N}: ${p.message}`)}}return{uploaded:F,skipped:P,errors:T}}async function Ms(t){return{invalidationId:(await new b().invalidateAll(t)).Id}}async function Tc(t,s="us-east-1"){let c=new y(s);try{let r=((await c.describeStacks({stackName:t})).Stacks[0]?.Outputs||[]).find((a)=>a.OutputKey==="BucketName")?.OutputValue;if(r)await new o(s).emptyBucket(r)}catch{}await c.deleteStack(t);let e=await c.waitForStackComplete(t,60,1e4);return{success:e.success||e.status==="DELETE_COMPLETE",message:e.success?"Static site deleted successfully":`Deletion failed: ${e.status}`}}async function wc(t){let{sourceDir:s,cleanBucket:c=!1,onProgress:e,...g}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await Ls(g);if(!i.success)return i;if(c){e?.("clean","Cleaning old files from S3...");try{await new o(g.region||"us-east-1").emptyBucket(i.bucket)}catch(d){console.log(`Note: Could not clean bucket: ${d.message}`)}}e?.("upload","Uploading files to S3...");let r=await $s({sourceDir:s,bucket:i.bucket,region:g.region||"us-east-1",cacheControl:g.cacheControl,onProgress:(d,m,A)=>{e?.("upload",`${d}/${m}: ${A}`)}});if(r.errors.length>0)return{...i,success:!1,message:`Upload errors: ${r.errors.join(", ")}`,filesUploaded:r.uploaded};if(i.distributionId&&r.uploaded>0)e?.("invalidate","Invalidating CloudFront cache..."),await Ms(i.distributionId);e?.("complete","Deployment complete!");let a=r.skipped>0?`Deployed ${r.uploaded} files (${r.skipped} unchanged)`:`Deployed ${r.uploaded} files successfully`;return{...i,filesUploaded:r.uploaded,filesSkipped:r.skipped,message:a}}
+export{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc};

package/dist/chunk-z5dqpsek.js

@@ -0,0 +1 @@
+import{Rc}from"./chunk-stqg97mh.js";import"./chunk-7y1pknej.js";import"./chunk-vaczx33v.js";import"./chunk-316cbffs.js";import"./chunk-3t5a5gr2.js";export{Rc as buildAndPushServerlessImage};

package/dist/{chunk-x7cnfn7y.js → chunk-zpkf2jt2.js}

@@ -1,2 +1,2 @@
-import{W,fl}from"./chunk-72p2tdpe.js";function Q(t,s){return`/var/www/${t}-${s}`}var y=new Set(["laravel","php","statamic","wordpress"]);function Kr(t){return t.type!=null&&y.has(t.type)}function Wr(t){let s=t.proxyTo;if(s==null)return[];return(Array.isArray(s)?s:[s]).map((n)=>String(n).trim()).filter((n)=>n.length>0)}function wd(t){return Wr(t).length>0}function Eo(t){if(t.deploy)return t.deploy;if(Kr(t))return"server";if(t.start)return"server";return"bucket"}function d(t){if(t.redirect)return"redirect";if(wd(t))return"proxy";if(Kr(t))return"server-php";if(Eo(t)==="bucket")return"bucket";return t.start?"server-app":"server-static"}function $A(t){return t.infrastructure?.compute!=null||Boolean(t.cloud?.attachTo?.trim())}function rm(t,s={}){let r=[],n=[],a=t.sites||{},p=$A(t),l=fl(t);if(l)r.push(l);let f=new Map;for(let[o,e]of Object.entries(a)){if(!e)continue;let h=Eo(e),c=d(e);if(c==="redirect"){if(!e.domain)r.push(`Site '${o}' is a redirect site but has no \`domain\` to redirect from.`);if(!(typeof e.redirect==="string"?e.redirect:e.redirect?.to))r.push(`Site '${o}' is a redirect site but has no redirect target (\`redirect\` / \`redirect.to\`).`);if(!p)r.push(`Site '${o}' is a redirect site but no \`infrastructure.compute\` is configured to host the gateway that serves the redirect.`);let u=[];if(e.start)u.push("start");if(e.root)u.push("root");if(e.proxyTo)u.push("proxyTo");if(u.length>0)n.push(`Site '${o}' is a redirect site but also sets ${u.join(", ")}. These are ignored.`);continue}if(c==="proxy"){if(!e.domain)r.push(`Site '${o}' is a proxy site but has no \`domain\` to route from.`);if(!p)r.push(`Site '${o}' is a proxy site but no \`infrastructure.compute\` is configured to host the gateway that forwards it.`);let i=[];if(e.start)i.push("start");if(e.root)i.push("root");if(typeof e.port==="number")i.push("port");if(e.build)i.push("build");if(e.preStart&&e.preStart.length>0)i.push("preStart");if(i.length>0)n.push(`Site '${o}' sets \`proxyTo\`, so ts-cloud ships and supervises nothing for it. ${i.join(", ")} ${i.length===1?"is":"are"} ignored — remove ${i.length===1?"it":"them"}, or drop \`proxyTo\` to let ts-cloud own the service.`);continue}if(h==="server"&&!e.start&&!e.root){r.push(`Site '${o}' sets deploy:'server' but declares neither \`start\` (dynamic app) nor \`root\` (static site to serve). Add one.`);continue}if(c==="server-php"){if(!p)r.push(`Site '${o}' is a PHP site (type:'${e.type}') but no \`infrastructure.compute\` is configured. Add a server (infrastructure.compute) with PHP provisioning.`);if(!e.repository?.url)r.push(`Site '${o}' is a PHP site (type:'${e.type}') but has no \`repository.url\` to clone. PHP sites deploy via git.`)}else if(c==="server-app"){if(!p)r.push(`Site '${o}' deploys to a server (deploy:'server'${e.deploy?"":" inferred from `start`"}) but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`);if(typeof e.port==="number"){let i=s.occupiedPorts?.get(e.port);if(i)r.push(`Site '${o}' wants port ${e.port}, which project '${i}' already serves on this box. Attached projects share one port namespace. Give '${o}' a free port, or let the attach allocate one.`);let u=f.get(e.port);if(u)r.push(`Sites '${u}' and '${o}' both use port ${e.port}. Server apps sharing a box must use distinct ports.`);else f.set(e.port,o)}}else if(c==="server-static"){if(!e.root)r.push(`Site '${o}' is a server static site (deploy:'server', no \`start\`) but has no \`root\` directory to serve.`);if(!p)r.push(`Site '${o}' deploys to a server (deploy:'server') but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`)}else{if(!e.root)r.push(`Site '${o}' deploys to a bucket but has no \`root\` directory to upload.`);let i=[];if(e.start)i.push("start");if(typeof e.port==="number")i.push("port");if(e.preStart&&e.preStart.length>0)i.push("preStart");if(i.length>0)n.push(`Site '${o}' deploys to a bucket but sets server-only field(s): ${i.join(", ")}. These are ignored. Set deploy:'server' to use them.`)}}return{errors:r,warnings:n}}function nm(t){let s=d(t);return s!=="bucket"&&s!=="redirect"&&s!=="proxy"}function GI(t){return d(t)==="bucket"}function VI(t,s){if(W(t)==="serverless")return!0;let r=Object.entries(t.sites??{}).filter(([,a])=>a!=null),n=s?r.filter(([a])=>a===s):r;if(n.length===0)return!0;return!n.every(([,a])=>{let p=d(a);return p==="redirect"||p==="proxy"})}
-export{Q,Kr,Wr,wd,Eo,d,$A,rm,nm,GI,VI};
+import{J,hl}from"./chunk-316cbffs.js";function Q(t,s){return`/var/www/${t}-${s}`}var y=new Set(["laravel","php","statamic","wordpress"]);function Kr(t){return t.type!=null&&y.has(t.type)}function Wr(t){let s=t.proxyTo;if(s==null)return[];return(Array.isArray(s)?s:[s]).map((n)=>String(n).trim()).filter((n)=>n.length>0)}function Rd(t){return Wr(t).length>0}function vo(t){if(t.deploy)return t.deploy;if(Kr(t))return"server";if(t.start)return"server";return"bucket"}function d(t){if(t.redirect)return"redirect";if(Rd(t))return"proxy";if(Kr(t))return"server-php";if(vo(t)==="bucket")return"bucket";return t.start?"server-app":"server-static"}function MA(t){return t.infrastructure?.compute!=null||Boolean(t.cloud?.attachTo?.trim())}function nm(t,s={}){let r=[],n=[],a=t.sites||{},p=MA(t),l=hl(t);if(l)r.push(l);let f=new Map;for(let[o,e]of Object.entries(a)){if(!e)continue;let h=vo(e),c=d(e);if(c==="redirect"){if(!e.domain)r.push(`Site '${o}' is a redirect site but has no \`domain\` to redirect from.`);if(!(typeof e.redirect==="string"?e.redirect:e.redirect?.to))r.push(`Site '${o}' is a redirect site but has no redirect target (\`redirect\` / \`redirect.to\`).`);if(!p)r.push(`Site '${o}' is a redirect site but no \`infrastructure.compute\` is configured to host the gateway that serves the redirect.`);let u=[];if(e.start)u.push("start");if(e.root)u.push("root");if(e.proxyTo)u.push("proxyTo");if(u.length>0)n.push(`Site '${o}' is a redirect site but also sets ${u.join(", ")}. These are ignored.`);continue}if(c==="proxy"){if(!e.domain)r.push(`Site '${o}' is a proxy site but has no \`domain\` to route from.`);if(!p)r.push(`Site '${o}' is a proxy site but no \`infrastructure.compute\` is configured to host the gateway that forwards it.`);let i=[];if(e.start)i.push("start");if(e.root)i.push("root");if(typeof e.port==="number")i.push("port");if(e.build)i.push("build");if(e.preStart&&e.preStart.length>0)i.push("preStart");if(i.length>0)n.push(`Site '${o}' sets \`proxyTo\`, so ts-cloud ships and supervises nothing for it. ${i.join(", ")} ${i.length===1?"is":"are"} ignored — remove ${i.length===1?"it":"them"}, or drop \`proxyTo\` to let ts-cloud own the service.`);continue}if(h==="server"&&!e.start&&!e.root){r.push(`Site '${o}' sets deploy:'server' but declares neither \`start\` (dynamic app) nor \`root\` (static site to serve). Add one.`);continue}if(c==="server-php"){if(!p)r.push(`Site '${o}' is a PHP site (type:'${e.type}') but no \`infrastructure.compute\` is configured. Add a server (infrastructure.compute) with PHP provisioning.`);if(!e.repository?.url)r.push(`Site '${o}' is a PHP site (type:'${e.type}') but has no \`repository.url\` to clone. PHP sites deploy via git.`)}else if(c==="server-app"){if(!p)r.push(`Site '${o}' deploys to a server (deploy:'server'${e.deploy?"":" inferred from `start`"}) but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`);if(typeof e.port==="number"){let i=s.occupiedPorts?.get(e.port);if(i)r.push(`Site '${o}' wants port ${e.port}, which project '${i}' already serves on this box. Attached projects share one port namespace. Give '${o}' a free port, or let the attach allocate one.`);let u=f.get(e.port);if(u)r.push(`Sites '${u}' and '${o}' both use port ${e.port}. Server apps sharing a box must use distinct ports.`);else f.set(e.port,o)}}else if(c==="server-static"){if(!e.root)r.push(`Site '${o}' is a server static site (deploy:'server', no \`start\`) but has no \`root\` directory to serve.`);if(!p)r.push(`Site '${o}' deploys to a server (deploy:'server') but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`)}else{if(!e.root)r.push(`Site '${o}' deploys to a bucket but has no \`root\` directory to upload.`);let i=[];if(e.start)i.push("start");if(typeof e.port==="number")i.push("port");if(e.preStart&&e.preStart.length>0)i.push("preStart");if(i.length>0)n.push(`Site '${o}' deploys to a bucket but sets server-only field(s): ${i.join(", ")}. These are ignored. Set deploy:'server' to use them.`)}}return{errors:r,warnings:n}}function im(t){let s=d(t);return s!=="bucket"&&s!=="redirect"&&s!=="proxy"}function VI(t){return d(t)==="bucket"}function qI(t,s){if(J(t)==="serverless")return!0;let r=Object.entries(t.sites??{}).filter(([,a])=>a!=null),n=s?r.filter(([a])=>a===s):r;if(n.length===0)return!0;return!n.every(([,a])=>{let p=d(a);return p==="redirect"||p==="proxy"})}
+export{Q,Kr,Wr,Rd,vo,d,MA,nm,im,VI,qI};

package/dist/deploy/index.js

@@ -1 +1 @@
-import{Nn,Bn,og,Rs,ag,cg,dg,oc,lg,ug,Rh,gg,v,pg,Ds,Ue,mg,fg,iI,hg,Ag,yg,Sg,Ig,Dh,sI,oI,aI,Ph,kh,cI,dI,Nh,Bh,lI,Ps,Er,ac,xn,On,vr,ut,Ht,ks,xh,_n,bg,Cg,cc,Bs,$n,xs,Cc}from"../chunk-cjm5j58y.js";import{Ec,Mn,Un,Os,_s,Ls,$s,vc,Tc}from"../chunk-9f18pebj.js";import{wc}from"../chunk-c6kb5c5v.js";import"../chunk-fne338jr.js";import"../chunk-h6kptkce.js";import"../chunk-zy3kr4s2.js";import"../chunk-1087xz1v.js";import"../chunk-hcbrgyfz.js";import"../chunk-zwayp7fz.js";import"../chunk-tpvmpmxj.js";import{Ug,Gc,Qg,oe,Vc,ei,Hg,qc,pd,mo,md,rr,Pi,fo}from"../chunk-zjkxhvn0.js";import"../chunk-dmv3vryr.js";import"../chunk-a77mhcs7.js";import"../chunk-by7hejhg.js";import"../chunk-1psh3mhm.js";import"../chunk-7d9ek8rc.js";import{wt,LA,Td,_i,Li,$i,tm}from"../chunk-xs9m0v31.js";import{Q,Kr,Wr,wd,Eo,d,$A,rm,nm,GI,VI}from"../chunk-x7cnfn7y.js";import"../chunk-fe6m7wb0.js";import"../chunk-72p2tdpe.js";import"../chunk-sjfc9my3.js";export{LA as DEFAULT_SITE_PORT_RANGE,wt as HOST_SITES_DIR,Vc as IPV6_EXCLUDED_HOST_LABELS,pd as MANAGEMENT_DASHBOARD_SITE,Nn as addSiteToCloudConfig,tm as allocateSitePorts,lI as buildAndPushContainerImage,wc as buildAndPushServerlessImage,Er as buildFunctionEnv,Li as buildHostSitePortsScript,fo as buildManagementDashboardArtifact,Ht as buildServerTopology,ks as buildServerlessTopology,xh as buildTopology,cc as collectEgressMetrics,Ug as collectServerDnsDomains,Bh as createContainerImageDependencies,Ph as createExistingStaticFullStackDependencies,Dh as createStaticApiOriginDependencies,$n as dashboardActions,mo as dashboardCredentialsFile,mg as dashboardPageRoutes,Sg as deleteFailoverReplicaBuckets,vc as deleteStaticSite,cI as deployExistingStaticFullStack,ac as deployServerlessApp,VI as deployShipsFiles,Ig as deploySite,sI as deployStaticApiOrigin,_s as deployStaticSite,Tc as deployStaticSiteFull,Mn as deployStaticSiteWithExternalDns,Un as deployStaticSiteWithExternalDnsFull,bg as egressReportMetrics,v as ensureDashboardActor,hg as ensureFailoverReplicaBuckets,Pi as ensureManagementDashboard,dI as estimateExistingStaticFullStackMonthlyCost,aI as estimateStaticApiOriginMonthlyCost,Cg as fetchEgressReport,kh as generateExistingStaticFullStackTemplate,Ec as generateExternalDnsStaticSiteTemplate,Os as generateStaticSiteTemplate,Ag as grantFailoverReplicaAccess,$A as hasComputeConfigured,wd as hasProxyUpstream,Nh as hashContainerContext,ei as hostAcceptsIpv6,Ps as infraEnvFromOutputs,pg as initializeDashboardControlPlane,$s as invalidateCache,Kr as isPhpSite,oc as isValidHostname,oe as normalizePublicIpv6,_i as occupiedHostPorts,$i as parseHostSiteFragments,Td as parseUpstreamPort,Hg as reconcileAddressRecords,xn as redeployServerlessApp,Qg as removeAddressRecords,Bn as removeSiteFromCloudConfig,Gc as removeStaleServerAddressRecords,lg as renderAliasesValue,dg as renderEnvValue,ug as renderRedirectsValue,Rh as renderSiteSnippet,ag as renderSslValue,cg as renderStringValue,xs as resolveDashboardAction,md as resolveDashboardAuth,_n as resolveDashboardData,fg as resolveLegacyDashboardRoute,Wr as resolveProxyUpstreams,Eo as resolveSiteDeployTarget,d as resolveSiteKind,rr as resolveUiSource,On as rollbackServerlessApp,iI as routesForDashboard,ut as runRemoteCommand,Bs as sanitizeCloudConfig,yg as seedFailoverReplicas,gg as setAttachToInCloudConfig,vr as setMaintenance,Rs as setSitePropertyInCloudConfig,nm as shipsARelease,GI as shipsToBucket,Q as siteInstallBase,Cc as startLocalDashboardServer,Ds as synchronizeDashboardUsers,Ue as trackDashboardOperation,og as updateSiteInCloudConfig,Ls as uploadStaticFiles,rm as validateDeploymentConfig,qc as verifyAddressRecord,oI as verifyStaticApiOrigin};
+import{Nn,Bn,ag,Ds,cg,dg,lg,ac,ug,gg,Dh,pg,T,mg,Ps,He,fg,hg,sI,Ag,yg,Sg,Ig,bg,Ph,oI,aI,cI,kh,Nh,dI,lI,Bh,xh,uI,ks,Er,cc,xn,On,vr,gt,Ht,Ns,Oh,_n,Cg,Eg,dc,xs,$n,Os,Ec}from"../chunk-jcxm737x.js";import{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc}from"../chunk-z1087cap.js";import{Rc}from"../chunk-stqg97mh.js";import"../chunk-4bysqvjh.js";import"../chunk-sp0ne2ax.js";import"../chunk-kken64a9.js";import"../chunk-4afz3x6w.js";import"../chunk-7y1pknej.js";import"../chunk-1kagq9vp.js";import"../chunk-p1agrrnq.js";import{Qg,Vc,Hg,ae,qc,ei,Gg,jc,md,fo,fd,rr,Pi,ho}from"../chunk-ybhjh309.js";import"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import{wt,$A,wd,Li,$i,Mi,rm}from"../chunk-bxq80y73.js";import{Q,Kr,Wr,Rd,vo,d,MA,nm,im,VI,qI}from"../chunk-zpkf2jt2.js";import"../chunk-n6tgqd7d.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{$A as DEFAULT_SITE_PORT_RANGE,wt as HOST_SITES_DIR,qc as IPV6_EXCLUDED_HOST_LABELS,md as MANAGEMENT_DASHBOARD_SITE,Nn as addSiteToCloudConfig,rm as allocateSitePorts,uI as buildAndPushContainerImage,Rc as buildAndPushServerlessImage,Er as buildFunctionEnv,$i as buildHostSitePortsScript,ho as buildManagementDashboardArtifact,Ht as buildServerTopology,Ns as buildServerlessTopology,Oh as buildTopology,dc as collectEgressMetrics,Qg as collectServerDnsDomains,xh as createContainerImageDependencies,kh as createExistingStaticFullStackDependencies,Ph as createStaticApiOriginDependencies,$n as dashboardActions,fo as dashboardCredentialsFile,fg as dashboardPageRoutes,Ig as deleteFailoverReplicaBuckets,Tc as deleteStaticSite,dI as deployExistingStaticFullStack,cc as deployServerlessApp,qI as deployShipsFiles,bg as deploySite,oI as deployStaticApiOrigin,Ls as deployStaticSite,wc as deployStaticSiteFull,Mn as deployStaticSiteWithExternalDns,Un as deployStaticSiteWithExternalDnsFull,Cg as egressReportMetrics,T as ensureDashboardActor,Ag as ensureFailoverReplicaBuckets,Pi as ensureManagementDashboard,lI as estimateExistingStaticFullStackMonthlyCost,cI as estimateStaticApiOriginMonthlyCost,Eg as fetchEgressReport,Nh as generateExistingStaticFullStackTemplate,vc as generateExternalDnsStaticSiteTemplate,_s as generateStaticSiteTemplate,yg as grantFailoverReplicaAccess,MA as hasComputeConfigured,Rd as hasProxyUpstream,Bh as hashContainerContext,ei as hostAcceptsIpv6,ks as infraEnvFromOutputs,mg as initializeDashboardControlPlane,Ms as invalidateCache,Kr as isPhpSite,ac as isValidHostname,ae as normalizePublicIpv6,Li as occupiedHostPorts,Mi as parseHostSiteFragments,wd as parseUpstreamPort,Gg as reconcileAddressRecords,xn as redeployServerlessApp,Hg as removeAddressRecords,Bn as removeSiteFromCloudConfig,Vc as removeStaleServerAddressRecords,ug as renderAliasesValue,lg as renderEnvValue,gg as renderRedirectsValue,Dh as renderSiteSnippet,cg as renderSslValue,dg as renderStringValue,Os as resolveDashboardAction,fd as resolveDashboardAuth,_n as resolveDashboardData,hg as resolveLegacyDashboardRoute,Wr as resolveProxyUpstreams,vo as resolveSiteDeployTarget,d as resolveSiteKind,rr as resolveUiSource,On as rollbackServerlessApp,sI as routesForDashboard,gt as runRemoteCommand,xs as sanitizeCloudConfig,Sg as seedFailoverReplicas,pg as setAttachToInCloudConfig,vr as setMaintenance,Ds as setSitePropertyInCloudConfig,im as shipsARelease,VI as shipsToBucket,Q as siteInstallBase,Ec as startLocalDashboardServer,Ps as synchronizeDashboardUsers,He as trackDashboardOperation,ag as updateSiteInCloudConfig,$s as uploadStaticFiles,nm as validateDeploymentConfig,jc as verifyAddressRecord,aI as verifyStaticApiOrigin};

package/dist/dns/index.js

@@ -1 +1 @@
-import{ht,Se,qe,G,Xt,Xn,js,zs,Nr,Br,Yn,xr,Ks,Ws,Js,Xs,se,Ys,Zs,eo,to,Ie,ro,no,io,B,Qc,Zn,Hc}from"../chunk-zwayp7fz.js";import"../chunk-tpvmpmxj.js";import"../chunk-7d9ek8rc.js";import"../chunk-72p2tdpe.js";import"../chunk-sjfc9my3.js";export{G as CloudflareProvider,Zn as DnsProviderFactory,qe as GoDaddyProvider,ht as PROXIABLE_RECORD_TYPES,Se as PorkbunProvider,se as Route53Provider,Ie as UnifiedDnsValidator,Js as applyDeclaredZoneSettings,eo as applyZoneMigration,B as createDnsProvider,no as createGoDaddyValidator,ro as createPorkbunValidator,io as createRoute53Validator,xr as delegateZone,Ks as delegateZoneFromConfig,Ws as describeDelegation,Xs as describeZoneSettings,Qc as detectDnsProvider,Hc as dnsProviders,Ys as exportRoute53Zone,Nr as isNameserverRegistrar,Br as isZoneHost,Zs as planZoneMigration,Xt as policyTag,Xn as qualifyName,zs as reconcileDeclaredRecords,js as resolveDeclaredRecords,Yn as sameNameservers,to as verifyZoneParity};
+import{At,be,ze,G,Xt,Xn,zs,Ks,Nr,Br,Yn,xr,Ws,Js,Xs,Ys,oe,Zs,eo,to,ro,Ce,no,io,so,B,Hc,Zn,Gc}from"../chunk-1kagq9vp.js";import"../chunk-p1agrrnq.js";import"../chunk-vaczx33v.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{G as CloudflareProvider,Zn as DnsProviderFactory,ze as GoDaddyProvider,At as PROXIABLE_RECORD_TYPES,be as PorkbunProvider,oe as Route53Provider,Ce as UnifiedDnsValidator,Xs as applyDeclaredZoneSettings,to as applyZoneMigration,B as createDnsProvider,io as createGoDaddyValidator,no as createPorkbunValidator,so as createRoute53Validator,xr as delegateZone,Ws as delegateZoneFromConfig,Js as describeDelegation,Ys as describeZoneSettings,Hc as detectDnsProvider,Gc as dnsProviders,Zs as exportRoute53Zone,Nr as isNameserverRegistrar,Br as isZoneHost,eo as planZoneMigration,Xt as policyTag,Xn as qualifyName,Ks as reconcileDeclaredRecords,zs as resolveDeclaredRecords,Yn as sameNameservers,ro as verifyZoneParity};

package/dist/drivers/index.d.ts

@@ -45,7 +45,7 @@ export type { ResolvedHostCleanupConfig, ResolvedHostCleanupRetention } from './
 export { buildAwsArtifactFetch, buildHostCleanupScript, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, releaseTarballTmpPath, resolveExecStart, } from './shared/deploy-script';
 export { deployAllComputeSites, deploySiteRelease, reloadRpxGateway, renewRpxCertificates, } from './shared/compute-deploy';
 export { isLocalDatabase } from './shared/db-provision';
-export { buildRpxConfig, buildRpxFragmentRefreshScript, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, gatewayHostnames, hasAutoWwwVariant, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
-export type { BuildRpxConfigOptions, BuildRpxFragmentRefreshOptions, BuildRpxProvisionOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
+export { buildRpxConfig, buildRpxFragmentRefreshScript, buildRpxLbConfig, buildRpxProvisionScript, buildRpxUpgradeScript, deriveRouteId, gatewayHostnames, hasAutoWwwVariant, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
+export type { BuildRpxConfigOptions, BuildRpxFragmentRefreshOptions, BuildRpxProvisionOptions, BuildRpxUpgradeOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
 export { buildCloudFrontOriginConfig, MANAGED_CACHE_POLICY_DISABLED, MANAGED_CACHE_POLICY_OPTIMIZED, MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER, } from './shared/cloudfront-origin';
 export type { BuildCloudFrontOriginOptions, OriginFrontedBehavior } from './shared/cloudfront-origin';

package/dist/drivers/index.js

@@ -1 +1 @@
-import{ti,Yt,_r,Zt,Lr,F,Mr,ri,ni,Fr,Ur,Jh,Xh,Kg,Wg,Yh,Zh,eA,Qr,ii,Jg,ao,si,oi,ai,ci,di,jc,zc,li,Hr,Ce,Kc,yt,Wc,ui,Jc,Gr,Yc,ze,ae,tr,Xg,gi,Zc,ed,td,rd,St,Ke,We,It,pi,mi,Ne,co,lo,Yg,Zg,nd,ep,bt,fi,id,tp,rp,sd,Ct,Be,od,np,ip,uo,hi,Et,sp,op,ap,cp,dp,lp,up,gp,pp,Ai,yi,Si,Ii,bi,Ci,Ei,mp,fp,Vr,U,go,hp,Ap,yp,ad,Sp,Ip,tA,rA,nA,cd,bp,iA,sA,oA,vi,Ti,wi,Ri,dd,ld,Di,ud,aA,po,Cp,Ep,vp,Tp,wp,gd,cA,ho,fd,ki,hd,Rp,Dp,Pp,dA}from"../chunk-zjkxhvn0.js";import{yo,Io,bo,lA,Sd,x,nr,HI,Co,xp,Je,V,xe}from"../chunk-dmv3vryr.js";import"../chunk-a77mhcs7.js";import"../chunk-by7hejhg.js";import"../chunk-1psh3mhm.js";import"../chunk-7d9ek8rc.js";import"../chunk-x7cnfn7y.js";import"../chunk-72p2tdpe.js";import"../chunk-sjfc9my3.js";export{ud as AwsBoxProvisioner,Mr as AwsDriver,yp as BOOT_PARTITION_LABEL,Cp as BOX_PANTRY_BIN_DIR,po as BOX_PANTRY_CLI_DIR,go as CloudDriverFactory,Wg as DEFAULT_HOST_CLEANUP_ESCALATED,Zh as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Yh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,Kg as DEFAULT_HOST_CLEANUP_RETENTION,eA as DEFAULT_HOST_CLEANUP_SCHEDULE,yo as DEFAULT_RPX_CERTS_DIR,Ap as FIRST_BOOT_SCRIPT_PATH,Ur as HOST_ARTIFACT_CACHE_DIR,Jh as HOST_CLEANUP_SCRIPT_PATH,Xh as HOST_CLEANUP_UNIT,Di as HetznerBoxProvisioner,Gr as HetznerClient,Ne as HetznerDriver,rd as LEGACY_DRIVER_STATE_DIR,co as LocalBoxDriver,Dp as MANAGED_CACHE_POLICY_DISABLED,Rp as MANAGED_CACHE_POLICY_OPTIMIZED,Pp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,ip as RASPBERRY_PI_DEFAULT_SWAP_GB,Jc as REMOTE_SCRIPT_RUNNER,Co as RPX_DIR,xp as RPX_LAUNCHER_PATH,Je as RPX_SERVICE_NAME,od as SSH_BOOTSTRAP_MARKER_DIR,Be as SSH_BOOTSTRAP_VERSION,Et as SSH_DEFAULTS,Ei as SSH_DEPLOY_STORAGE_PATH,Yg as SSH_INSECURE_HOST_KEY_OPTS,Zg as SSH_KEEPALIVE_OPTS,yi as SSH_PREFLIGHT_SCRIPT,mp as SSH_SKIP_BOOTSTRAP_ENV,Vr as SshDriver,Ct as SystemSshTransport,dd as UBUNTU_2404_AMI_PARAM,oA as acquireResizeLock,tA as applyHetznerHostOptimization,mi as applyHetznerVolumes,uo as assertArchSupported,fp as assertSshComputeConfig,jc as buildAwsArtifactFetch,wp as buildBoxConvergeScript,Ep as buildBoxSandboxConvergeScript,ld as buildBoxUserData,dA as buildCloudFrontOriginConfig,ad as buildCloudInitFirstBoot,ni as buildComputeStorageInstallScript,Fr as buildComputeStorageSiteScript,Ip as buildHetznerHostOptimizationScript,si as buildHostCleanupDeployScript,Jg as buildHostCleanupExecutable,ao as buildHostCleanupInstallScript,ii as buildHostCleanupScript,zc as buildLocalArtifactFetch,x as buildRpxConfig,xe as buildRpxFragmentRefreshScript,nr as buildRpxLbConfig,V as buildRpxProvisionScript,ep as buildScpArgsFor,ai as buildSiteDeployScript,li as buildSshArgs,nd as buildSshArgsFor,hi as buildSshBootstrapScript,ci as buildStaticSiteDeployScript,hp as cloudDrivers,rA as collectHetznerHostOptimizationReport,Zc as collectHetznerResizeManifest,aA as createBoxProvisioner,U as createCloudDriver,fd as deployAllComputeSites,ho as deploySiteRelease,Sd as deriveRouteId,ti as describeScriptSyntaxError,St as driverStateDir,Ke as driverStatePath,Ti as ensureFirewall,wi as ensureServer,vi as ensureSshKey,Ii as evaluatePreflight,gi as executeHetznerServerResize,rp as findKnownHostKey,Ci as formatPreflightFindings,Yt as formatSshFailure,bo as gatewayHostnames,F as generateUbuntuAppCloudInit,Io as hasAutoWwwVariant,lo as isBoxMode,Xg as isHetznerCapacityError,Lr as isLocalDatabase,tp as knownHostsLine,id as knownHostsToken,lA as normalizeRoutePath,ze as normalizeSshPublicKey,gd as parseBoxReport,Si as parsePreflightFacts,tr as planHetznerServerResize,pi as planHetznerVolumes,bi as preflightFailed,ed as prepareHetznerResize,cA as provisionBox,We as readDriverState,iA as readResizeCheckpoint,di as releaseTarballTmpPath,ki as reloadRpxGateway,ui as remoteScriptRunner,Tp as renderBoxUnit,vp as renderEnvFile,HI as renderRpxLauncher,hd as renewRpxCertificates,cd as resizeCheckpointPath,bp as resizeLockPath,ri as resolveComputeVolumes,oi as resolveExecStart,Yc as resolveHetznerApiToken,Sp as resolveHetznerHostOptimizationPlan,Qr as resolveHostCleanupConfig,dp as resolveSshHostKeyPolicy,sp as resolveSshHosts,pp as resolveSshLan,ap as resolveSshPort,cp as resolveSshPrivateKeyPath,up as resolveSshProfile,gp as resolveSshPublicIp,Ai as resolveSshSettings,lp as resolveSshSudo,op as resolveSshUser,fi as scanHostKey,Kc as scpUpload,Ri as serverPublicIpv4,np as sshBootstrapMarkerPath,Hr as sshExec,Ce as sshExecOrThrow,bt as sshHostKeyFingerprint,sd as sshKnownHostsPath,Zt as summarizeRemoteFailures,_r as surfaceRemoteNotices,nA as verifyHetznerHostOptimization,td as verifyHetznerResize,Wc as waitForCloudInit,yt as waitForSsh,ae as wrapCloudInitUserData,It as writeDriverState,sA as writeResizeCheckpoint};
+import{ti,Yt,_r,Zt,Lr,F,Mr,ri,ni,Fr,Ur,Xh,Yh,Wg,Jg,Zh,eA,tA,Qr,ii,Xg,co,si,oi,ai,ci,di,zc,Kc,li,Hr,ve,Wc,St,Jc,ui,Xc,Gr,Zc,We,ce,tr,Yg,gi,ed,td,rd,nd,It,Je,Xe,bt,pi,mi,xe,lo,uo,Zg,ep,id,tp,Ct,fi,sd,rp,np,od,Et,Oe,ad,ip,sp,go,hi,vt,op,ap,cp,dp,lp,up,gp,pp,mp,Ai,yi,Si,Ii,bi,Ci,Ei,fp,hp,Vr,U,po,Ap,yp,Sp,cd,Ip,bp,rA,nA,iA,dd,Cp,sA,oA,aA,vi,Ti,wi,Ri,ld,ud,Di,gd,cA,mo,Ep,vp,Tp,wp,Rp,pd,dA,Ao,hd,ki,Ad,Dp,Pp,kp,lA}from"../chunk-ybhjh309.js";import{So,bo,Co,uA,Id,x,nr,GI,xi,Eo,le,Op,V,_e}from"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import"../chunk-zpkf2jt2.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{gd as AwsBoxProvisioner,Mr as AwsDriver,Sp as BOOT_PARTITION_LABEL,Ep as BOX_PANTRY_BIN_DIR,mo as BOX_PANTRY_CLI_DIR,po as CloudDriverFactory,Jg as DEFAULT_HOST_CLEANUP_ESCALATED,eA as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Zh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,Wg as DEFAULT_HOST_CLEANUP_RETENTION,tA as DEFAULT_HOST_CLEANUP_SCHEDULE,So as DEFAULT_RPX_CERTS_DIR,yp as FIRST_BOOT_SCRIPT_PATH,Ur as HOST_ARTIFACT_CACHE_DIR,Xh as HOST_CLEANUP_SCRIPT_PATH,Yh as HOST_CLEANUP_UNIT,Di as HetznerBoxProvisioner,Gr as HetznerClient,xe as HetznerDriver,nd as LEGACY_DRIVER_STATE_DIR,lo as LocalBoxDriver,Pp as MANAGED_CACHE_POLICY_DISABLED,Dp as MANAGED_CACHE_POLICY_OPTIMIZED,kp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,sp as RASPBERRY_PI_DEFAULT_SWAP_GB,Xc as REMOTE_SCRIPT_RUNNER,xi as RPX_DIR,Eo as RPX_LAUNCHER_PATH,le as RPX_SERVICE_NAME,ad as SSH_BOOTSTRAP_MARKER_DIR,Oe as SSH_BOOTSTRAP_VERSION,vt as SSH_DEFAULTS,Ei as SSH_DEPLOY_STORAGE_PATH,Zg as SSH_INSECURE_HOST_KEY_OPTS,ep as SSH_KEEPALIVE_OPTS,yi as SSH_PREFLIGHT_SCRIPT,fp as SSH_SKIP_BOOTSTRAP_ENV,Vr as SshDriver,Et as SystemSshTransport,ld as UBUNTU_2404_AMI_PARAM,aA as acquireResizeLock,rA as applyHetznerHostOptimization,mi as applyHetznerVolumes,go as assertArchSupported,hp as assertSshComputeConfig,zc as buildAwsArtifactFetch,Rp as buildBoxConvergeScript,vp as buildBoxSandboxConvergeScript,ud as buildBoxUserData,lA as buildCloudFrontOriginConfig,cd as buildCloudInitFirstBoot,ni as buildComputeStorageInstallScript,Fr as buildComputeStorageSiteScript,bp as buildHetznerHostOptimizationScript,si as buildHostCleanupDeployScript,Xg as buildHostCleanupExecutable,co as buildHostCleanupInstallScript,ii as buildHostCleanupScript,Kc as buildLocalArtifactFetch,x as buildRpxConfig,_e as buildRpxFragmentRefreshScript,nr as buildRpxLbConfig,V as buildRpxProvisionScript,Op as buildRpxUpgradeScript,tp as buildScpArgsFor,ai as buildSiteDeployScript,li as buildSshArgs,id as buildSshArgsFor,hi as buildSshBootstrapScript,ci as buildStaticSiteDeployScript,Ap as cloudDrivers,nA as collectHetznerHostOptimizationReport,ed as collectHetznerResizeManifest,cA as createBoxProvisioner,U as createCloudDriver,hd as deployAllComputeSites,Ao as deploySiteRelease,Id as deriveRouteId,ti as describeScriptSyntaxError,It as driverStateDir,Je as driverStatePath,Ti as ensureFirewall,wi as ensureServer,vi as ensureSshKey,Ii as evaluatePreflight,gi as executeHetznerServerResize,np as findKnownHostKey,Ci as formatPreflightFindings,Yt as formatSshFailure,Co as gatewayHostnames,F as generateUbuntuAppCloudInit,bo as hasAutoWwwVariant,uo as isBoxMode,Yg as isHetznerCapacityError,Lr as isLocalDatabase,rp as knownHostsLine,sd as knownHostsToken,uA as normalizeRoutePath,We as normalizeSshPublicKey,pd as parseBoxReport,Si as parsePreflightFacts,tr as planHetznerServerResize,pi as planHetznerVolumes,bi as preflightFailed,td as prepareHetznerResize,dA as provisionBox,Xe as readDriverState,sA as readResizeCheckpoint,di as releaseTarballTmpPath,ki as reloadRpxGateway,ui as remoteScriptRunner,wp as renderBoxUnit,Tp as renderEnvFile,GI as renderRpxLauncher,Ad as renewRpxCertificates,dd as resizeCheckpointPath,Cp as resizeLockPath,ri as resolveComputeVolumes,oi as resolveExecStart,Zc as resolveHetznerApiToken,Ip as resolveHetznerHostOptimizationPlan,Qr as resolveHostCleanupConfig,lp as resolveSshHostKeyPolicy,op as resolveSshHosts,mp as resolveSshLan,cp as resolveSshPort,dp as resolveSshPrivateKeyPath,gp as resolveSshProfile,pp as resolveSshPublicIp,Ai as resolveSshSettings,up as resolveSshSudo,ap as resolveSshUser,fi as scanHostKey,Wc as scpUpload,Ri as serverPublicIpv4,ip as sshBootstrapMarkerPath,Hr as sshExec,ve as sshExecOrThrow,Ct as sshHostKeyFingerprint,od as sshKnownHostsPath,Zt as summarizeRemoteFailures,_r as surfaceRemoteNotices,iA as verifyHetznerHostOptimization,rd as verifyHetznerResize,Jc as waitForCloudInit,St as waitForSsh,ce as wrapCloudInitUserData,bt as writeDriverState,oA as writeResizeCheckpoint};

package/dist/drivers/shared/compute-storage.d.ts

@@ -11,6 +11,7 @@ export interface MountedComputeVolume extends ResolvedComputeVolume {
 export interface ComputeStoragePolicy {
     volumes: MountedComputeVolume[];
     deploymentStorage?: ComputeConfig['deploymentStorage'];
+    persistentStorage?: ComputeConfig['persistentStorage'];
     webRoot: string;
 }
 export declare const COMPUTE_STORAGE_CONFIG = "/etc/ts-cloud/compute-storage.json";

package/dist/drivers/shared/persistent-storage-agent.d.ts

@@ -0,0 +1,3 @@
+import type { ComputeStoragePolicy } from './compute-storage';
+/** Operator maintenance, not an application worker. Serialized as the published host agent. */
+export declare function persistentStorageAgent(policy: ComputeStoragePolicy, command?: string): Promise<unknown>;

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -418,6 +418,20 @@ export declare function mergeRpxFragments(fragments: RpxGatewayConfig[]): RpxGat
  * starts the gateway. A malformed fragment is skipped, not fatal.
  */
 export declare function renderRpxAssembler(sitesDir?: string, defaultCertsDir?: string): string;
+/** Upgrade the published gateway runtime without regenerating any host configuration. */
+export interface BuildRpxUpgradeOptions {
+    /** Exact published package version. Floating tags cannot produce a reproducible upgrade. */
+    version: string;
+    /** Absolute path to the host's Bun runtime. */
+    bunBin?: string;
+}
+/**
+ * Stage and compile an exact published gateway version before touching the live
+ * install. Keep the existing assembler, route fragments, certificates and service
+ * unit byte-for-byte, including operator environment settings. Restore the old
+ * install and executable if the upgraded service cannot start.
+ */
+export declare function buildRpxUpgradeScript(options: BuildRpxUpgradeOptions): string[];
 export interface BuildRpxProvisionOptions {
     config: RpxGatewayConfig;
     proxy: ComputeProxyConfig;

package/dist/index.d.ts

@@ -42,7 +42,7 @@ export { collectServerDnsDomains, hostAcceptsIpv6, IPV6_EXCLUDED_HOST_LABELS, no
 export type { AddressRecordReport } from './deploy/server-dns';
 export * from './cdn';
 export type { EnsureDashboardLogger, ResolvedDashboardAuth, StaticSiteConfig, DeployResult, UploadOptions, ExternalDnsStaticSiteConfig, ExternalDnsDeployResult, DeploySiteConfig, DeploySiteResult, StaticSiteDnsProvider, SiteDeployKind, DeploymentValidationResult, BuildImageOptions, BuiltImage, CodeSource, DeployServerlessOptions, ResolvedContext, } from './deploy';
-export { createCloudDriver, resolveComputeVolumes, buildComputeStorageInstallScript, buildComputeStorageSiteScript, planHetznerVolumes, applyHetznerVolumes, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, SshDriver, SystemSshTransport, resolveSshSettings, buildSshBootstrapScript, SSH_BOOTSTRAP_VERSION, evaluatePreflight, formatPreflightFindings, parsePreflightFacts, preflightFailed, SSH_PREFLIGHT_SCRIPT, buildCloudInitFirstBoot, driverStatePath, readDriverState, writeDriverState, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildHostCleanupScript, buildHostCleanupDeployScript, buildHostCleanupInstallScript, resolveHostCleanupConfig, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, isLocalDatabase, reloadRpxGateway, renewRpxCertificates, gatewayHostnames, hasAutoWwwVariant, DEFAULT_RPX_CERTS_DIR, buildRpxConfig, buildRpxFragmentRefreshScript, } from './drivers';
+export { createCloudDriver, resolveComputeVolumes, buildComputeStorageInstallScript, buildComputeStorageSiteScript, planHetznerVolumes, applyHetznerVolumes, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, SshDriver, SystemSshTransport, resolveSshSettings, buildSshBootstrapScript, SSH_BOOTSTRAP_VERSION, evaluatePreflight, formatPreflightFindings, parsePreflightFacts, preflightFailed, SSH_PREFLIGHT_SCRIPT, buildCloudInitFirstBoot, driverStatePath, readDriverState, writeDriverState, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildHostCleanupScript, buildHostCleanupDeployScript, buildHostCleanupInstallScript, resolveHostCleanupConfig, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, isLocalDatabase, reloadRpxGateway, buildRpxUpgradeScript, renewRpxCertificates, gatewayHostnames, hasAutoWwwVariant, DEFAULT_RPX_CERTS_DIR, buildRpxConfig, buildRpxFragmentRefreshScript, } from './drivers';
 export type { CreateCloudDriverOptions } from './drivers/factory';
 export type { DriverState, FirstBootBundle, FirstBootIdentity, FirstBootOs, ResolvedSshSettings, SshDriverOptions, SshDriverState, SshPreflightFacts, SshTransport, SshTransportOptions, } from './drivers';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';