@stacksjs/ts-cloud 0.16.94 → 0.16.96

package/dist/deploy/index.js

@@ -1 +1 @@
-import{Nn,Bn,ag,Ds,cg,dg,lg,ac,ug,gg,Dh,pg,T,mg,Ps,He,fg,hg,sI,Ag,yg,Sg,Ig,bg,Ph,oI,aI,cI,kh,Nh,dI,lI,Bh,xh,uI,ks,Er,cc,xn,On,vr,gt,Ht,Ns,Oh,_n,Cg,Eg,dc,xs,$n,Os,Ec}from"../chunk-bxn4n4qa.js";import{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc}from"../chunk-z1087cap.js";import{Rc}from"../chunk-stqg97mh.js";import"../chunk-4bysqvjh.js";import"../chunk-sp0ne2ax.js";import"../chunk-kken64a9.js";import"../chunk-4afz3x6w.js";import"../chunk-7y1pknej.js";import"../chunk-1kagq9vp.js";import"../chunk-p1agrrnq.js";import{Qg,Vc,Hg,ae,qc,ei,Gg,jc,md,fo,fd,rr,Pi,ho}from"../chunk-71p77ycz.js";import"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import{wt,$A,wd,Li,$i,Mi,rm}from"../chunk-bxq80y73.js";import{Q,Kr,Wr,Rd,vo,d,MA,nm,im,VI,qI}from"../chunk-zpkf2jt2.js";import"../chunk-n6tgqd7d.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{$A as DEFAULT_SITE_PORT_RANGE,wt as HOST_SITES_DIR,qc as IPV6_EXCLUDED_HOST_LABELS,md as MANAGEMENT_DASHBOARD_SITE,Nn as addSiteToCloudConfig,rm as allocateSitePorts,uI as buildAndPushContainerImage,Rc as buildAndPushServerlessImage,Er as buildFunctionEnv,$i as buildHostSitePortsScript,ho as buildManagementDashboardArtifact,Ht as buildServerTopology,Ns as buildServerlessTopology,Oh as buildTopology,dc as collectEgressMetrics,Qg as collectServerDnsDomains,xh as createContainerImageDependencies,kh as createExistingStaticFullStackDependencies,Ph as createStaticApiOriginDependencies,$n as dashboardActions,fo as dashboardCredentialsFile,fg as dashboardPageRoutes,Ig as deleteFailoverReplicaBuckets,Tc as deleteStaticSite,dI as deployExistingStaticFullStack,cc as deployServerlessApp,qI as deployShipsFiles,bg as deploySite,oI as deployStaticApiOrigin,Ls as deployStaticSite,wc as deployStaticSiteFull,Mn as deployStaticSiteWithExternalDns,Un as deployStaticSiteWithExternalDnsFull,Cg as egressReportMetrics,T as ensureDashboardActor,Ag as ensureFailoverReplicaBuckets,Pi as ensureManagementDashboard,lI as estimateExistingStaticFullStackMonthlyCost,cI as estimateStaticApiOriginMonthlyCost,Eg as fetchEgressReport,Nh as generateExistingStaticFullStackTemplate,vc as generateExternalDnsStaticSiteTemplate,_s as generateStaticSiteTemplate,yg as grantFailoverReplicaAccess,MA as hasComputeConfigured,Rd as hasProxyUpstream,Bh as hashContainerContext,ei as hostAcceptsIpv6,ks as infraEnvFromOutputs,mg as initializeDashboardControlPlane,Ms as invalidateCache,Kr as isPhpSite,ac as isValidHostname,ae as normalizePublicIpv6,Li as occupiedHostPorts,Mi as parseHostSiteFragments,wd as parseUpstreamPort,Gg as reconcileAddressRecords,xn as redeployServerlessApp,Hg as removeAddressRecords,Bn as removeSiteFromCloudConfig,Vc as removeStaleServerAddressRecords,ug as renderAliasesValue,lg as renderEnvValue,gg as renderRedirectsValue,Dh as renderSiteSnippet,cg as renderSslValue,dg as renderStringValue,Os as resolveDashboardAction,fd as resolveDashboardAuth,_n as resolveDashboardData,hg as resolveLegacyDashboardRoute,Wr as resolveProxyUpstreams,vo as resolveSiteDeployTarget,d as resolveSiteKind,rr as resolveUiSource,On as rollbackServerlessApp,sI as routesForDashboard,gt as runRemoteCommand,xs as sanitizeCloudConfig,Sg as seedFailoverReplicas,pg as setAttachToInCloudConfig,vr as setMaintenance,Ds as setSitePropertyInCloudConfig,im as shipsARelease,VI as shipsToBucket,Q as siteInstallBase,Ec as startLocalDashboardServer,Ps as synchronizeDashboardUsers,He as trackDashboardOperation,ag as updateSiteInCloudConfig,$s as uploadStaticFiles,nm as validateDeploymentConfig,jc as verifyAddressRecord,aI as verifyStaticApiOrigin};
+import{Nn,Bn,ag,Ds,cg,dg,lg,ac,ug,gg,Dh,pg,T,mg,Ps,He,fg,hg,sI,Ag,yg,Sg,Ig,bg,Ph,oI,aI,cI,kh,Nh,dI,lI,Bh,xh,uI,ks,Er,cc,xn,On,vr,gt,Ht,Ns,Oh,_n,Cg,Eg,dc,xs,$n,Os,Ec}from"../chunk-jcxm737x.js";import{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc}from"../chunk-z1087cap.js";import{Rc}from"../chunk-stqg97mh.js";import"../chunk-4bysqvjh.js";import"../chunk-sp0ne2ax.js";import"../chunk-kken64a9.js";import"../chunk-4afz3x6w.js";import"../chunk-7y1pknej.js";import"../chunk-1kagq9vp.js";import"../chunk-p1agrrnq.js";import{Qg,Vc,Hg,ae,qc,ei,Gg,jc,md,fo,fd,rr,Pi,ho}from"../chunk-ybhjh309.js";import"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import{wt,$A,wd,Li,$i,Mi,rm}from"../chunk-bxq80y73.js";import{Q,Kr,Wr,Rd,vo,d,MA,nm,im,VI,qI}from"../chunk-zpkf2jt2.js";import"../chunk-n6tgqd7d.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{$A as DEFAULT_SITE_PORT_RANGE,wt as HOST_SITES_DIR,qc as IPV6_EXCLUDED_HOST_LABELS,md as MANAGEMENT_DASHBOARD_SITE,Nn as addSiteToCloudConfig,rm as allocateSitePorts,uI as buildAndPushContainerImage,Rc as buildAndPushServerlessImage,Er as buildFunctionEnv,$i as buildHostSitePortsScript,ho as buildManagementDashboardArtifact,Ht as buildServerTopology,Ns as buildServerlessTopology,Oh as buildTopology,dc as collectEgressMetrics,Qg as collectServerDnsDomains,xh as createContainerImageDependencies,kh as createExistingStaticFullStackDependencies,Ph as createStaticApiOriginDependencies,$n as dashboardActions,fo as dashboardCredentialsFile,fg as dashboardPageRoutes,Ig as deleteFailoverReplicaBuckets,Tc as deleteStaticSite,dI as deployExistingStaticFullStack,cc as deployServerlessApp,qI as deployShipsFiles,bg as deploySite,oI as deployStaticApiOrigin,Ls as deployStaticSite,wc as deployStaticSiteFull,Mn as deployStaticSiteWithExternalDns,Un as deployStaticSiteWithExternalDnsFull,Cg as egressReportMetrics,T as ensureDashboardActor,Ag as ensureFailoverReplicaBuckets,Pi as ensureManagementDashboard,lI as estimateExistingStaticFullStackMonthlyCost,cI as estimateStaticApiOriginMonthlyCost,Eg as fetchEgressReport,Nh as generateExistingStaticFullStackTemplate,vc as generateExternalDnsStaticSiteTemplate,_s as generateStaticSiteTemplate,yg as grantFailoverReplicaAccess,MA as hasComputeConfigured,Rd as hasProxyUpstream,Bh as hashContainerContext,ei as hostAcceptsIpv6,ks as infraEnvFromOutputs,mg as initializeDashboardControlPlane,Ms as invalidateCache,Kr as isPhpSite,ac as isValidHostname,ae as normalizePublicIpv6,Li as occupiedHostPorts,Mi as parseHostSiteFragments,wd as parseUpstreamPort,Gg as reconcileAddressRecords,xn as redeployServerlessApp,Hg as removeAddressRecords,Bn as removeSiteFromCloudConfig,Vc as removeStaleServerAddressRecords,ug as renderAliasesValue,lg as renderEnvValue,gg as renderRedirectsValue,Dh as renderSiteSnippet,cg as renderSslValue,dg as renderStringValue,Os as resolveDashboardAction,fd as resolveDashboardAuth,_n as resolveDashboardData,hg as resolveLegacyDashboardRoute,Wr as resolveProxyUpstreams,vo as resolveSiteDeployTarget,d as resolveSiteKind,rr as resolveUiSource,On as rollbackServerlessApp,sI as routesForDashboard,gt as runRemoteCommand,xs as sanitizeCloudConfig,Sg as seedFailoverReplicas,pg as setAttachToInCloudConfig,vr as setMaintenance,Ds as setSitePropertyInCloudConfig,im as shipsARelease,VI as shipsToBucket,Q as siteInstallBase,Ec as startLocalDashboardServer,Ps as synchronizeDashboardUsers,He as trackDashboardOperation,ag as updateSiteInCloudConfig,$s as uploadStaticFiles,nm as validateDeploymentConfig,jc as verifyAddressRecord,aI as verifyStaticApiOrigin};

package/dist/drivers/index.js

@@ -1 +1 @@
-import{ti,Yt,_r,Zt,Lr,F,Mr,ri,ni,Fr,Ur,Xh,Yh,Wg,Jg,Zh,eA,tA,Qr,ii,Xg,co,si,oi,ai,ci,di,zc,Kc,li,Hr,ve,Wc,St,Jc,ui,Xc,Gr,Zc,We,ce,tr,Yg,gi,ed,td,rd,nd,It,Je,Xe,bt,pi,mi,xe,lo,uo,Zg,ep,id,tp,Ct,fi,sd,rp,np,od,Et,Oe,ad,ip,sp,go,hi,vt,op,ap,cp,dp,lp,up,gp,pp,mp,Ai,yi,Si,Ii,bi,Ci,Ei,fp,hp,Vr,U,po,Ap,yp,Sp,cd,Ip,bp,rA,nA,iA,dd,Cp,sA,oA,aA,vi,Ti,wi,Ri,ld,ud,Di,gd,cA,mo,Ep,vp,Tp,wp,Rp,pd,dA,Ao,hd,ki,Ad,Dp,Pp,kp,lA}from"../chunk-71p77ycz.js";import{So,bo,Co,uA,Id,x,nr,GI,xi,Eo,le,Op,V,_e}from"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import"../chunk-zpkf2jt2.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{gd as AwsBoxProvisioner,Mr as AwsDriver,Sp as BOOT_PARTITION_LABEL,Ep as BOX_PANTRY_BIN_DIR,mo as BOX_PANTRY_CLI_DIR,po as CloudDriverFactory,Jg as DEFAULT_HOST_CLEANUP_ESCALATED,eA as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Zh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,Wg as DEFAULT_HOST_CLEANUP_RETENTION,tA as DEFAULT_HOST_CLEANUP_SCHEDULE,So as DEFAULT_RPX_CERTS_DIR,yp as FIRST_BOOT_SCRIPT_PATH,Ur as HOST_ARTIFACT_CACHE_DIR,Xh as HOST_CLEANUP_SCRIPT_PATH,Yh as HOST_CLEANUP_UNIT,Di as HetznerBoxProvisioner,Gr as HetznerClient,xe as HetznerDriver,nd as LEGACY_DRIVER_STATE_DIR,lo as LocalBoxDriver,Pp as MANAGED_CACHE_POLICY_DISABLED,Dp as MANAGED_CACHE_POLICY_OPTIMIZED,kp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,sp as RASPBERRY_PI_DEFAULT_SWAP_GB,Xc as REMOTE_SCRIPT_RUNNER,xi as RPX_DIR,Eo as RPX_LAUNCHER_PATH,le as RPX_SERVICE_NAME,ad as SSH_BOOTSTRAP_MARKER_DIR,Oe as SSH_BOOTSTRAP_VERSION,vt as SSH_DEFAULTS,Ei as SSH_DEPLOY_STORAGE_PATH,Zg as SSH_INSECURE_HOST_KEY_OPTS,ep as SSH_KEEPALIVE_OPTS,yi as SSH_PREFLIGHT_SCRIPT,fp as SSH_SKIP_BOOTSTRAP_ENV,Vr as SshDriver,Et as SystemSshTransport,ld as UBUNTU_2404_AMI_PARAM,aA as acquireResizeLock,rA as applyHetznerHostOptimization,mi as applyHetznerVolumes,go as assertArchSupported,hp as assertSshComputeConfig,zc as buildAwsArtifactFetch,Rp as buildBoxConvergeScript,vp as buildBoxSandboxConvergeScript,ud as buildBoxUserData,lA as buildCloudFrontOriginConfig,cd as buildCloudInitFirstBoot,ni as buildComputeStorageInstallScript,Fr as buildComputeStorageSiteScript,bp as buildHetznerHostOptimizationScript,si as buildHostCleanupDeployScript,Xg as buildHostCleanupExecutable,co as buildHostCleanupInstallScript,ii as buildHostCleanupScript,Kc as buildLocalArtifactFetch,x as buildRpxConfig,_e as buildRpxFragmentRefreshScript,nr as buildRpxLbConfig,V as buildRpxProvisionScript,Op as buildRpxUpgradeScript,tp as buildScpArgsFor,ai as buildSiteDeployScript,li as buildSshArgs,id as buildSshArgsFor,hi as buildSshBootstrapScript,ci as buildStaticSiteDeployScript,Ap as cloudDrivers,nA as collectHetznerHostOptimizationReport,ed as collectHetznerResizeManifest,cA as createBoxProvisioner,U as createCloudDriver,hd as deployAllComputeSites,Ao as deploySiteRelease,Id as deriveRouteId,ti as describeScriptSyntaxError,It as driverStateDir,Je as driverStatePath,Ti as ensureFirewall,wi as ensureServer,vi as ensureSshKey,Ii as evaluatePreflight,gi as executeHetznerServerResize,np as findKnownHostKey,Ci as formatPreflightFindings,Yt as formatSshFailure,Co as gatewayHostnames,F as generateUbuntuAppCloudInit,bo as hasAutoWwwVariant,uo as isBoxMode,Yg as isHetznerCapacityError,Lr as isLocalDatabase,rp as knownHostsLine,sd as knownHostsToken,uA as normalizeRoutePath,We as normalizeSshPublicKey,pd as parseBoxReport,Si as parsePreflightFacts,tr as planHetznerServerResize,pi as planHetznerVolumes,bi as preflightFailed,td as prepareHetznerResize,dA as provisionBox,Xe as readDriverState,sA as readResizeCheckpoint,di as releaseTarballTmpPath,ki as reloadRpxGateway,ui as remoteScriptRunner,wp as renderBoxUnit,Tp as renderEnvFile,GI as renderRpxLauncher,Ad as renewRpxCertificates,dd as resizeCheckpointPath,Cp as resizeLockPath,ri as resolveComputeVolumes,oi as resolveExecStart,Zc as resolveHetznerApiToken,Ip as resolveHetznerHostOptimizationPlan,Qr as resolveHostCleanupConfig,lp as resolveSshHostKeyPolicy,op as resolveSshHosts,mp as resolveSshLan,cp as resolveSshPort,dp as resolveSshPrivateKeyPath,gp as resolveSshProfile,pp as resolveSshPublicIp,Ai as resolveSshSettings,up as resolveSshSudo,ap as resolveSshUser,fi as scanHostKey,Wc as scpUpload,Ri as serverPublicIpv4,ip as sshBootstrapMarkerPath,Hr as sshExec,ve as sshExecOrThrow,Ct as sshHostKeyFingerprint,od as sshKnownHostsPath,Zt as summarizeRemoteFailures,_r as surfaceRemoteNotices,iA as verifyHetznerHostOptimization,rd as verifyHetznerResize,Jc as waitForCloudInit,St as waitForSsh,ce as wrapCloudInitUserData,bt as writeDriverState,oA as writeResizeCheckpoint};
+import{ti,Yt,_r,Zt,Lr,F,Mr,ri,ni,Fr,Ur,Xh,Yh,Wg,Jg,Zh,eA,tA,Qr,ii,Xg,co,si,oi,ai,ci,di,zc,Kc,li,Hr,ve,Wc,St,Jc,ui,Xc,Gr,Zc,We,ce,tr,Yg,gi,ed,td,rd,nd,It,Je,Xe,bt,pi,mi,xe,lo,uo,Zg,ep,id,tp,Ct,fi,sd,rp,np,od,Et,Oe,ad,ip,sp,go,hi,vt,op,ap,cp,dp,lp,up,gp,pp,mp,Ai,yi,Si,Ii,bi,Ci,Ei,fp,hp,Vr,U,po,Ap,yp,Sp,cd,Ip,bp,rA,nA,iA,dd,Cp,sA,oA,aA,vi,Ti,wi,Ri,ld,ud,Di,gd,cA,mo,Ep,vp,Tp,wp,Rp,pd,dA,Ao,hd,ki,Ad,Dp,Pp,kp,lA}from"../chunk-ybhjh309.js";import{So,bo,Co,uA,Id,x,nr,GI,xi,Eo,le,Op,V,_e}from"../chunk-bzdfx427.js";import"../chunk-93xknw91.js";import"../chunk-cjqw4ns4.js";import"../chunk-byt4re1c.js";import"../chunk-vaczx33v.js";import"../chunk-zpkf2jt2.js";import"../chunk-316cbffs.js";import"../chunk-3t5a5gr2.js";export{gd as AwsBoxProvisioner,Mr as AwsDriver,Sp as BOOT_PARTITION_LABEL,Ep as BOX_PANTRY_BIN_DIR,mo as BOX_PANTRY_CLI_DIR,po as CloudDriverFactory,Jg as DEFAULT_HOST_CLEANUP_ESCALATED,eA as DEFAULT_HOST_CLEANUP_HIGH_WATER_PERCENT,Zh as DEFAULT_HOST_CLEANUP_LOW_WATER_PERCENT,Wg as DEFAULT_HOST_CLEANUP_RETENTION,tA as DEFAULT_HOST_CLEANUP_SCHEDULE,So as DEFAULT_RPX_CERTS_DIR,yp as FIRST_BOOT_SCRIPT_PATH,Ur as HOST_ARTIFACT_CACHE_DIR,Xh as HOST_CLEANUP_SCRIPT_PATH,Yh as HOST_CLEANUP_UNIT,Di as HetznerBoxProvisioner,Gr as HetznerClient,xe as HetznerDriver,nd as LEGACY_DRIVER_STATE_DIR,lo as LocalBoxDriver,Pp as MANAGED_CACHE_POLICY_DISABLED,Dp as MANAGED_CACHE_POLICY_OPTIMIZED,kp as MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,sp as RASPBERRY_PI_DEFAULT_SWAP_GB,Xc as REMOTE_SCRIPT_RUNNER,xi as RPX_DIR,Eo as RPX_LAUNCHER_PATH,le as RPX_SERVICE_NAME,ad as SSH_BOOTSTRAP_MARKER_DIR,Oe as SSH_BOOTSTRAP_VERSION,vt as SSH_DEFAULTS,Ei as SSH_DEPLOY_STORAGE_PATH,Zg as SSH_INSECURE_HOST_KEY_OPTS,ep as SSH_KEEPALIVE_OPTS,yi as SSH_PREFLIGHT_SCRIPT,fp as SSH_SKIP_BOOTSTRAP_ENV,Vr as SshDriver,Et as SystemSshTransport,ld as UBUNTU_2404_AMI_PARAM,aA as acquireResizeLock,rA as applyHetznerHostOptimization,mi as applyHetznerVolumes,go as assertArchSupported,hp as assertSshComputeConfig,zc as buildAwsArtifactFetch,Rp as buildBoxConvergeScript,vp as buildBoxSandboxConvergeScript,ud as buildBoxUserData,lA as buildCloudFrontOriginConfig,cd as buildCloudInitFirstBoot,ni as buildComputeStorageInstallScript,Fr as buildComputeStorageSiteScript,bp as buildHetznerHostOptimizationScript,si as buildHostCleanupDeployScript,Xg as buildHostCleanupExecutable,co as buildHostCleanupInstallScript,ii as buildHostCleanupScript,Kc as buildLocalArtifactFetch,x as buildRpxConfig,_e as buildRpxFragmentRefreshScript,nr as buildRpxLbConfig,V as buildRpxProvisionScript,Op as buildRpxUpgradeScript,tp as buildScpArgsFor,ai as buildSiteDeployScript,li as buildSshArgs,id as buildSshArgsFor,hi as buildSshBootstrapScript,ci as buildStaticSiteDeployScript,Ap as cloudDrivers,nA as collectHetznerHostOptimizationReport,ed as collectHetznerResizeManifest,cA as createBoxProvisioner,U as createCloudDriver,hd as deployAllComputeSites,Ao as deploySiteRelease,Id as deriveRouteId,ti as describeScriptSyntaxError,It as driverStateDir,Je as driverStatePath,Ti as ensureFirewall,wi as ensureServer,vi as ensureSshKey,Ii as evaluatePreflight,gi as executeHetznerServerResize,np as findKnownHostKey,Ci as formatPreflightFindings,Yt as formatSshFailure,Co as gatewayHostnames,F as generateUbuntuAppCloudInit,bo as hasAutoWwwVariant,uo as isBoxMode,Yg as isHetznerCapacityError,Lr as isLocalDatabase,rp as knownHostsLine,sd as knownHostsToken,uA as normalizeRoutePath,We as normalizeSshPublicKey,pd as parseBoxReport,Si as parsePreflightFacts,tr as planHetznerServerResize,pi as planHetznerVolumes,bi as preflightFailed,td as prepareHetznerResize,dA as provisionBox,Xe as readDriverState,sA as readResizeCheckpoint,di as releaseTarballTmpPath,ki as reloadRpxGateway,ui as remoteScriptRunner,wp as renderBoxUnit,Tp as renderEnvFile,GI as renderRpxLauncher,Ad as renewRpxCertificates,dd as resizeCheckpointPath,Cp as resizeLockPath,ri as resolveComputeVolumes,oi as resolveExecStart,Zc as resolveHetznerApiToken,Ip as resolveHetznerHostOptimizationPlan,Qr as resolveHostCleanupConfig,lp as resolveSshHostKeyPolicy,op as resolveSshHosts,mp as resolveSshLan,cp as resolveSshPort,dp as resolveSshPrivateKeyPath,gp as resolveSshProfile,pp as resolveSshPublicIp,Ai as resolveSshSettings,up as resolveSshSudo,ap as resolveSshUser,fi as scanHostKey,Wc as scpUpload,Ri as serverPublicIpv4,ip as sshBootstrapMarkerPath,Hr as sshExec,ve as sshExecOrThrow,Ct as sshHostKeyFingerprint,od as sshKnownHostsPath,Zt as summarizeRemoteFailures,_r as surfaceRemoteNotices,iA as verifyHetznerHostOptimization,rd as verifyHetznerResize,Jc as waitForCloudInit,St as waitForSsh,ce as wrapCloudInitUserData,bt as writeDriverState,oA as writeResizeCheckpoint};

package/dist/drivers/shared/compute-storage.d.ts

@@ -11,6 +11,7 @@ export interface MountedComputeVolume extends ResolvedComputeVolume {
 export interface ComputeStoragePolicy {
     volumes: MountedComputeVolume[];
     deploymentStorage?: ComputeConfig['deploymentStorage'];
+    persistentStorage?: ComputeConfig['persistentStorage'];
     webRoot: string;
 }
 export declare const COMPUTE_STORAGE_CONFIG = "/etc/ts-cloud/compute-storage.json";

package/dist/drivers/shared/persistent-storage-agent.d.ts

@@ -0,0 +1,3 @@
+import type { ComputeStoragePolicy } from './compute-storage';
+/** Operator maintenance, not an application worker. Serialized as the published host agent. */
+export declare function persistentStorageAgent(policy: ComputeStoragePolicy, command?: string): Promise<unknown>;

package/dist/index.js

@@ -1,4 +1,4 @@
-import{JI,XI,gl,Pm,pl,ml,ln,H,l,fl,km,J,hl,p,py,C,rt,Zi,un,R,ge,Al,my,r,t,YI,ZI,m,eb,tb,rb,nb,ib,ur,yl,es,fy,sb,ob,$e,nt,Sl,Nm,Bm,ab,xm,Om,_m,Wo,Il,pe,gn,Nt,Jo,Bt,we,hy,bl,Xo,Lm,$m,Mm,Fm,Cl,cb,X,v,Ay,yy,Um,a,I,it,f,Qm,st,Y,xt,db,Hm,Z,El,Me,gr,Yo,me,vl,fe,Sy,Zo,ee,te,L,ts,D,pr,Ot,re,e,pn,lb,Gm,Tl,ub,gb,pb,mb,wl,fb,hb,Ab,yb,Sb,Ib,bb,Cb,Eb,vb,Tb,wb,Iy,by,Cy,Ey,vy,Ty,wy,mr,Vm,qm,fr,rs,Rb,jm,Db,Pb,mn,kb,Nb,Bb,xb,Ob,_b,zm,k,Re,ns,ea,fn,is,ta,Ry,Lb,ss,ra,Dy,Py,ky,Ny,By,xy,os,$b,na,Oy,Km,q,_y,ot,ia,_t,Ly,Wm,$y,My,Fy,Jm,j,Mb,Fb,Ub,Qb,Uy,Hb,ne,Gb,Vb,qb,Rl,Dl,Qy,Xm,Ym,jb,zb,Kb,Wb,Jb,Hy,Pl,Xb,Yb,Zb,eC,tC,Gy,Vy,rC,nC,iC,sC,oC,aC,cC,qy,dC,Zm,kl,lC,uC,gC,pC,ef,tf,rf,mC,Nl,jy,zy,Ky,Wy,Bl,Jy,fC,hC,AC,yC,SC,IC,bC,Xy,Yy,Zy,eS,nf,CC,EC,vC,TC,wC,RC,DC,PC,kC,tS,rS,nS,iS,NC,BC,sf,xC,of,af,cf,df,OC,_C,LC,$C,Fe,as,MC,FC,UC,QC,HC,GC,VC,qC,sS,jC,zC,lf,uf,KC,WC,oS,JC,XC,YC,ZC,eE,tE,rE,nE,iE,sE,oE,aE,cE,dE,lE,uE,gE,pE,mE,fE,hE,xl,aS,Ol,cS,_l,dS,Ll,lS,$l,uS,hr,gS,Ml,pS,cs,mS,Fl,fS,Ul,hS,gf,AE,pf,yE,Ql,AS,Ar,yS,mf,SE,Hl,SS,ff,IE,hf,bE,Af,CE,Gl,IS,yf,EE,Sf,vE,If,TE,bf,wE,Vl,bS,ql,CS,Cf,RE,Ef,DE,vf,PE,Tf,kE,wf,NE,Rf,BE,jl,ES,Df,xE,Pf,OE,kf,_E,Nf,LE,Bf,$E,xf,ME,Of,_f,Lf,$f,Mf,FE,Ff,UE,Uf,QE,Qf,HE,at,Hf,vS,sa,zl,hn,TS,ds,yr,Kl,Wl,wS,RS,Jl,Gf,Xl,Vf,GE,VE,oa,aa,ca,Yl,An,Zl,eu,ls,da,la,qf,DS,PS,kS,qE,jf,zf,jE,NS,Kf,BS,xS,OS,zE,Wf,yn,tu,Jf,KE,_S,ua,ga,ru,Xf,WE,nu,LS,Yf,JE,Zf,XE,eh,YE}from"./chunk-316cbffs.js";import{iu,N,su,pa,FS,th,US,QS,HS,GS,VS,qS,jS,zS}from"./chunk-3t5a5gr2.js";import{Sa,rh,pu,WS,fs,mu,Ia,nh,ih,In,ba,fu,ct,hu,Au,yu,hs,bn,sh,dt,Su,Ca,Ea,va,Iu,bu,Cu,As,Ta,Eu,Cn,ys,wa,Lt,oh,vu,Tu,ah,wu,Ra,Sr,Ru,Du,Pu,ku,lt,ch,Nu,Ir,Da,Pa,ka,Ss,Is,En,Bu,bs,Na,Ba,vn,xu,Tn,dh,lh,$t,wn,xa,uh,Ou,_u,Oa,Lu,$u,Mu,JS,he,Fu,XS,YS,Cs,Es,ZS,De,gh,Mt,Ue,Qe,Ft,Uu,Qu,Hu,Gu,ph,mh,_a,fh,hh,La,Vu,qu,Ah,Ae,yh,ju,Pe,$a,ut,Ut,Qt,Rn,vs,zu,eI,Sh,Ih,bh,Ch,Ma,Fa,Ku,Ua,Dn,Qa,Wu,Ts,Ju,Ha,Ga,Va,qa,ja,za,Ka,Wa,Xu,br,Ja,Yu,Pn,Zu,Xa,Ya,eg,Cr,Za,ec,Eh,tI,ws,rI,nI,iI,tc,rc,tg,vh,nc,kn,rg,Rs,ng,ig,sg,ic,Th,sc,og,wh,oc,Rh,Nn,Bn,ag,Ds,pg,Ag,yg,Sg,Ig,bg,ks,Er,cc,xn,On,vr,gt,_h,lc,Lh,$h,vg,uc,Bs,Tg,gc,Gt,Ge,wg,pc,mc,Rg,fc,hc,Ac,yc,Dg,Pg,Ln,Sc,Ic,bc,Cc,kg,xs,$n,Os,Ec}from"./chunk-bxn4n4qa.js";import{gu}from"./chunk-tes38y8x.js";import{Q,Wr,Rd,vo,d,nm,im}from"./chunk-zpkf2jt2.js";import{wt,wd,Li,$i,Mi,rm}from"./chunk-bxq80y73.js";import{pA,mA,fA,$p,Mp,Fp,hA,Up,Qp,AA,yA,Hp,SA,IA,vd,Gp,bA,CA,Vp,EA,vA,TA,wA,RA,DA,PA,_i,Td,qp,jp,zp,Kp,Wp,Jp,Xp,Yp,Zp,em,tm,kA,NA,BA,xA,OA,_A,LA}from"./chunk-xa2ahxxa.js";import{Ze,Dd,Te,ir,Pd,O,sr,Rt,kd,To,FA,sm,Nd,s,Fi,wo,Jr,Bd,xd,Xr,UA,Od,jI,zI,Ro,KI,WI,_d,Ld,Ui,Do,ue,c,Po,et,Yr,QA,HA,$d,GA,ko,VA,qA,No,Md,Zr,Bo,jA,or,Fd,om,ar,en,zA,xo,KA,_,WA,Ud,am,Oo,JA,XA,YA,Qd,Qi,_o,Hd,cr,Dt,ZA,tn,ey,Gd,cm,dm,Lo,Vd,qd,Pt,lm,Hi,jd,$o,rn,um,Gi,zd,Kd,Vi,gm,Wd,Jd,Xd,Yd,Mo,pm,mm,ty,fm,Zd,qi,hm,Am,Fo,nn,Uo,Qo,Ho,el,ym,tl,Go,ry,dr,ny,rl,sn,nl,iy,il,Sm,ji,on,Vo,zi,tt,sy,Im,bm,lr,sl,ol,al,Ki,Wi,Ji,oy,ay,kt,qo,cy,an,Cm,jo,dy,Em,vm,Tm,ly,wm,Rm,uy,i,gy,Xi,zo,Ko}from"./chunk-n6tgqd7d.js";import{n}from"./chunk-vaczx33v.js";import{Be,ht,Wn}from"./chunk-kken64a9.js";import{ke,Qs,Hs,xg,Dc,Pc,Gs,kc,pt,ie,mt,ye,w,Ne,Hn,Nc,Ve,Bc,Gn,Vn,qn,Vt,qt,jt,jn,wr,xc,Rr,Dr,ft,zn,_c,zt,Pr,Kn,$c,Mg,Fg,Mc,kr}from"./chunk-4bysqvjh.js";import{o}from"./chunk-byt4re1c.js";import{y}from"./chunk-cjqw4ns4.js";import{jr,Le}from"./chunk-93xknw91.js";import{Fc,qe,b}from"./chunk-4afz3x6w.js";import{E}from"./chunk-p1agrrnq.js";import{At,be,ze,Ug,Kt,Uc,Qc,Wt,G,Jn,Jt,Xt,Xn,zs,Ks,Nr,Br,Yn,xr,Ws,Js,Xs,Ys,oe,Zs,eo,to,ro,Ce,no,io,so,B,Hc,Zn,Gc,Ee,Or}from"./chunk-1kagq9vp.js";import{je}from"./chunk-7y1pknej.js";import{se}from"./chunk-sp0ne2ax.js";import{Qg,Vc,Hg,ae,qc,ei,Gg,jc,Vg,qg,Jh,Lr,ao,F,Mr,ri,ni,Fr,Qr,ii,co,si,oi,ai,ci,li,Hr,ve,Wc,St,Jc,Gr,Zc,We,ce,Je,Xe,bt,pi,mi,xe,Et,Oe,hi,Ai,yi,Si,Ii,bi,Ci,Vr,U,po,Ap,cd,vi,Ti,wi,Ri,md,fo,fd,rr,Pi,ho,Ao,hd,ki,Ad}from"./chunk-71p77ycz.js";import{So,bo,Co,x,Op,_e}from"./chunk-bzdfx427.js";import{ou,ma,gs,ps,fa,au,cu,ms,ha,Aa,lu,uu,ya}from"./chunk-r2gtxb7n.js";import{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc}from"./chunk-z1087cap.js";import{Rc}from"./chunk-stqg97mh.js";import{de,Ni,yo,yd,Bi,Np}from"./chunk-wggeew90.js";import{cl,cn,dl,ll,ul,Yi,Dm,dn}from"./chunk-x1k1sbgf.js";import{$S,us}from"./chunk-wnevarf9.js";var tR="https://api.machines.dev/v1";class Io extends Error{status;path;constructor(u,g,h){super(u);this.status=g;this.path=h;this.name="FlyApiError"}}function sd(u){let g=u.ip.includes(":");if(g&&u.ip.startsWith("fdaa:"))return"private_v6";if(u.shared)return"shared_v4";return g?"v6":"v4"}class hp{token;fetch;constructor(u){if(!u.token)throw Error("Fly.io needs an API token: set FLY_API_TOKEN (`fly tokens create deploy` makes one scoped to an app).");this.token=u.token,this.fetch=u.fetch??fetch}async rest(u,g,h={}){let S=new URL(`https://api.machines.dev/v1${g}`);for(let[M,W]of Object.entries(h.query??{}))S.searchParams.set(M,W);let A=await this.fetch(S,{method:u,headers:{Authorization:`Bearer ${this.token}`,...h.body!==void 0?{"Content-Type":"application/json"}:{},...h.headers},body:h.body===void 0?void 0:JSON.stringify(h.body)});if(A.status===404&&h.notFound==="null")return null;let T=await A.text(),P=T?yp(T):void 0;if(!A.ok){let M=typeof P==="object"&&P&&"error"in P?String(P.error):T||A.statusText;throw new Io(`Fly.io ${u} ${g} failed (${A.status}): ${M}`,A.status,g)}return P}getApp(u){return this.rest("GET",`/apps/${encodeURIComponent(u)}`,{notFound:"null"})}createApp(u,g){return this.rest("POST","/apps",{body:{app_name:u,org_slug:g}})}async listMachines(u){return await this.rest("GET",`/apps/${encodeURIComponent(u)}/machines`)??[]}createMachine(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/machines`,{body:g})}updateMachine(u,g,h,S){return this.rest("POST",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}`,{body:h,headers:{"fly-machine-lease-nonce":S}})}async acquireLease(u,g,h=120){let A=(await this.rest("POST",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/lease`,{body:{ttl:h}})).data?.nonce;if(!A)throw new Io(`Fly.io gave no lease nonce for Machine ${g}`,200,`/machines/${g}/lease`);return A}async releaseLease(u,g,h){await this.rest("DELETE",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/lease`,{headers:{"fly-machine-lease-nonce":h}})}async waitForState(u,g,h,S={}){await this.rest("GET",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/wait`,{query:{state:h,timeout:String(S.timeoutSeconds??60),...S.instanceId?{instance_id:S.instanceId}:{}}})}async listVolumes(u){return await this.rest("GET",`/apps/${encodeURIComponent(u)}/volumes`)??[]}createVolume(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/volumes`,{body:{...g,encrypted:!0}})}async setSecrets(u,g){return(await this.rest("POST",`/apps/${encodeURIComponent(u)}/secrets`,{body:{values:g}})).version}async listIpAssignments(u){return(await this.rest("GET",`/apps/${encodeURIComponent(u)}/ip_assignments`)).ips??[]}async assignIp(u,g){let h=await this.rest("POST",`/apps/${encodeURIComponent(u)}/ip_assignments`,{body:{type:g}});if(!h.ip)throw new Io(`Fly.io assigned no ${g} address to ${u}`,200,`/apps/${u}/ip_assignments`);return{ip:h.ip,shared:h.shared??g==="shared_v4",region:h.region}}async requestCertificate(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/certificates/acme`,{body:{hostname:g}})}}function yp(u){try{return JSON.parse(u)}catch{return}}var Lc="ts-cloud-role";function iR(u,g){let h=u.fly??{},S=h.app??`${u.project.slug}-${g.environment}`;if(!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(S))throw Error(`"${S}" is not a valid Fly app name: lowercase letters, digits and dashes, 3 to 63 characters.`);let A=h.internalPort??3000,T=h.count??1;if(!Number.isInteger(T)||T<1)throw Error(`fly.count must be a whole number of at least 1, got ${T}.`);return{app:S,org:h.org??"personal",image:g.image,regions:h.regions?.length?h.regions:["iad"],count:T,internalPort:A,healthPath:h.healthPath??"/",vm:{cpuKind:h.vm?.cpuKind??"shared",cpus:h.vm?.cpus??1,memoryMb:h.vm?.memoryMb??512},...h.volume?{volume:{name:h.volume.name??"data",sizeGb:h.volume.sizeGb,path:h.volume.path}}:{},autoStop:h.autoStop??!1,env:{...g.env,PORT:String(A)},secrets:g.secrets??{},hostnames:h.hostnames??[],release:g.release}}function Cp(u){return{image:u.image,env:u.env,guest:{cpu_kind:u.vm.cpuKind,cpus:u.vm.cpus,memory_mb:u.vm.memoryMb},services:[{protocol:"tcp",internal_port:u.internalPort,ports:[{port:80,handlers:["http"],force_https:!0},{port:443,handlers:["tls","http"]}],autostop:u.autoStop?"stop":"off",autostart:!0,...u.autoStop?{min_machines_running:0}:{},checks:[{type:"http",method:"GET",path:u.healthPath,interval:"15s",timeout:"5s",grace_period:"10s"}]}],restart:{policy:"on-failure",max_retries:10},metadata:{[Lc]:"app","ts-cloud-release":u.release}}}async function oR(u,g,h=()=>{}){let S=!1;if(!await u.getApp(g.app))h(`Creating Fly app ${g.app} in ${g.org}`),await u.createApp(g.app,g.org),S=!0;let A;if(Object.keys(g.secrets).length>0)A=await u.setSecrets(g.app,g.secrets),h(`Set ${Object.keys(g.secrets).length} secret(s) (version ${A})`);let T=await u.listIpAssignments(g.app),P=new Set(T.map(sd));if(!P.has("v6"))T.push(await u.assignIp(g.app,"v6")),h("Assigned a dedicated IPv6");if(!P.has("v4")&&!P.has("shared_v4"))T.push(await u.assignIp(g.app,"shared_v4")),h("Assigned a shared IPv4");let M=Cp(g),W=(await u.listMachines(g.app)).filter((Se)=>{let Ie=Se.config?.metadata??{};if(Ie[Lc])return Ie[Lc]==="app";return!Ie.fly_process_group||Ie.fly_process_group==="app"}),le=g.volume?await u.listVolumes(g.app):[],K=[],Ct=[],Tt=new Set;for(let Se of g.regions){let Ie=W.filter((z)=>z.region===Se).sort((z,Ye)=>z.id.localeCompare(Ye.id));for(let z=0;z<g.count;z++){let Ye=Ie[z];if(Ye){Tt.add(Ye.id),await Sp(u,g.app,Ye,M,A),Ct.push(Ye.id),h(`Updated ${Ye.id} (${Se}) to ${g.image}`);continue}let V=g.volume?[{volume:(await Rp(u,g,Se,le)).id,path:g.volume.path}]:void 0,Ke=await u.createMachine(g.app,{region:Se,name:`${g.app}-${Se}-${z+1}`,config:{...M,...V?{mounts:V}:{}},...A!==void 0?{min_secrets_version:A}:{}});await u.waitForState(g.app,Ke.id,"started",{instanceId:Ke.instance_id}),K.push(Ke.id),h(`Created ${Ke.id} in ${Se}`)}}let He=[];for(let Se of g.hostnames)He.push(await u.requestCertificate(g.app,Se));return{app:g.app,url:`https://${g.app}.fly.dev`,createdApp:S,created:K,updated:Ct,untouched:W.filter((Se)=>!Tt.has(Se.id)).map((Se)=>Se.id),ips:T,certificates:He}}async function Sp(u,g,h,S,A){let T=await u.acquireLease(g,h.id);try{let P=await u.updateMachine(g,h.id,{config:{...S,...h.config?.mounts?.length?{mounts:h.config.mounts}:{}},...A!==void 0?{min_secrets_version:A}:{}},T);await u.waitForState(g,h.id,"started",{instanceId:P.instance_id})}finally{await u.releaseLease(g,h.id,T)}}async function Rp(u,g,h,S){let A=S.find((P)=>P.region===h&&P.name===g.volume.name&&!P.attached_machine_id);if(A)return A.attached_machine_id="pending",A;let T=await u.createVolume(g.app,{name:g.volume.name,region:h,size_gb:g.volume.sizeGb});return S.push({...T,attached_machine_id:"pending"}),T}import{createHmac as ad,createSign as bp,timingSafeEqual as Pp}from"node:crypto";function Di(u){let g=u instanceof Date?u.getTime():u;if(!Number.isFinite(g))throw TypeError("Media access timestamp must be finite");return Math.floor(g/1000)}function ld(u){return Buffer.from(u).toString("base64").replaceAll("+","-").replaceAll("=","_").replaceAll("/","~")}function Tp(u){return Buffer.from(u).toString("base64url")}function ud(u,g=!1){if(!u||/[\r\n]/.test(u))throw TypeError("Media resource is invalid");let h=g?u.replaceAll("*","wildcard"):u,S=new URL(h);if(!["http:","https:"].includes(S.protocol))throw TypeError("Media resource must use HTTP or HTTPS");if(!g&&u.includes("*"))throw TypeError("Canned policies cannot contain wildcards")}function dd(u,g){let h=bp("RSA-SHA1");return h.update(u),h.end(),ld(h.sign(g))}function pd(u){ud(u.resource,!0);let h={DateLessThan:{"AWS:EpochTime":Di(u.expiresAt)}};if(u.activeAt!==void 0)h.DateGreaterThan={"AWS:EpochTime":Di(u.activeAt)};if(u.ipAddress)h.IpAddress={"AWS:SourceIp":u.ipAddress};return JSON.stringify({Statement:[{Resource:u.resource,Condition:h}]})}function dR(u,g,h){ud(u);let S=Di(g),A=u.includes("?")?"&":"?",T=pd({resource:u,expiresAt:g}),P=dd(T,h.privateKey);return`${u}${A}Expires=${S}&Signature=${encodeURIComponent(P)}&Key-Pair-Id=${encodeURIComponent(h.keyPairId)}`}function pR(u,g){let h=pd(u);return{"CloudFront-Key-Pair-Id":g.keyPairId,"CloudFront-Policy":ld(Buffer.from(h)),"CloudFront-Signature":dd(h,g.privateKey)}}function mR(u){if(!u.resource||/[\r\n]/.test(u.resource))throw TypeError("Media resource is invalid");let g=Tp(Buffer.from(JSON.stringify({resource:u.resource,expiresAt:Di(u.expiresAt),...u.keyId?{keyId:u.keyId}:{},...u.audience?{audience:u.audience}:{}}))),h=ad("sha256",u.secret).update(g).digest("base64url");return`${g}.${h}`}function gR(u,g){let[h,S,A]=u.split(".");if(!h||!S||A)return null;let T=ad("sha256",g.secret).update(h).digest(),P;try{P=Buffer.from(S,"base64url")}catch{return null}if(T.length!==P.length||!Pp(T,P))return null;try{let M=JSON.parse(Buffer.from(h,"base64url").toString("utf8")),W=Di(g.now??Date.now());if(!M.resource||!Number.isSafeInteger(M.expiresAt)||M.expiresAt<=W)return null;if(g.resource&&M.resource!==g.resource)return null;if(g.audience&&M.audience!==g.audience)return null;return M}catch{return null}}function fR(u,g=!1){let h=new URL(u,"https://media.invalid").pathname.toLowerCase(),S=/\.(?:m3u8|mpd|vtt|json)$/.test(h),A=/\.(?:key|license)$/.test(h)||h.includes("/keys/")||h.includes("/licenses/");return{"Accept-Ranges":"bytes","Cache-Control":g&&(S||A)?"private, no-store":S?"public, max-age=5, s-maxage=30, stale-while-revalidate=30":"public, max-age=31536000, immutable","Cross-Origin-Resource-Policy":"cross-origin","X-Content-Type-Options":"nosniff"}}function hR(u){if(!/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(u.bucket))throw TypeError("Media bucket is invalid");if(!/^[a-z0-9-]+$/.test(u.region))throw TypeError("Media bucket region is invalid");let g=u.prefix?`/${u.prefix.replace(/^\/+|\/+$/g,"")}`:"",h=u.protected??!1,S="public, max-age=31536000, immutable",A=h?"private, no-store":"public, max-age=5, s-maxage=30, stale-while-revalidate=30";return{originDomain:`${u.bucket}.s3.${u.region}.amazonaws.com`,originPath:g,domain:u.domain,trustedKeyGroupIds:[...new Set(u.trustedKeyGroupIds??[])],behaviors:[{pathPattern:"*.m3u8",cacheControl:A,compress:!0,signed:h},{pathPattern:"*.mpd",cacheControl:A,compress:!0,signed:h},{pathPattern:"*.vtt",cacheControl:A,compress:!0,signed:h},{pathPattern:"*",cacheControl:S,compress:!1,signed:h}],responseHeaders:{"Access-Control-Allow-Headers":"Range, If-Range","Access-Control-Allow-Methods":"GET, HEAD, OPTIONS","Access-Control-Allow-Origin":"*","Access-Control-Expose-Headers":"Accept-Ranges, Content-Length, Content-Range, ETag","X-Content-Type-Options":"nosniff"}}}class wp{builder;config;environment;mergedConfig;serverEipLogicalIds=new Map;storageFailoverReplicas=[];constructor(u){this.config=u.config,this.environment=u.environment,this.builder=new Al(`${this.config.project.name} - ${this.environment}`),this.mergedConfig=this.mergeEnvironmentConfig()}mergeEnvironmentConfig(){let g=this.config.environments[this.environment]?.infrastructure;if(!g)return this.config;return{...this.config,infrastructure:{...this.config.infrastructure,...g,compute:{...this.config.infrastructure?.compute,...g.compute},storage:{...this.config.infrastructure?.storage,...g.storage},functions:{...this.config.infrastructure?.functions,...g.functions},servers:{...this.config.infrastructure?.servers,...g.servers},databases:{...this.config.infrastructure?.databases,...g.databases},cdn:{...this.config.infrastructure?.cdn,...g.cdn},sftp:g.sftp??this.config.infrastructure?.sftp,queues:{...this.config.infrastructure?.queues,...g.queues},redirects:{...this.config.infrastructure?.redirects,...g.redirects},realtime:{...this.config.infrastructure?.realtime,...g.realtime},cache:{...this.config.infrastructure?.cache,...g.cache},fileSystem:{...this.config.infrastructure?.fileSystem,...g.fileSystem},email:{...this.config.infrastructure?.email,...g.email},search:{...this.config.infrastructure?.search,...g.search},ai:{...this.config.infrastructure?.ai,...g.ai}}}}shouldDeploy(u){if(u.environments&&!u.environments.includes(this.environment))return!1;if(u.requiresFeatures){let g=this.config.features||{};if(!u.requiresFeatures.every((S)=>g[S]===!0))return!1}if(u.regions){let g=this.config.environments[this.environment]?.region||this.config.project.region;if(!u.regions.includes(g))return!1}if(u.condition&&typeof u.condition==="function")return u.condition(this.config,this.environment);return!0}resolveApiOriginPort(){let u=this.mergedConfig.infrastructure?.api?.port??this.mergedConfig.ports?.api,g=Number(u||3008);return Number.isFinite(g)&&g>0?g:3008}defaultComputeCachePathPatterns(){return["/api/*","/auth/*","/publisher/api/*","/publisher/*","/publish","/publish/*","/analytics/*","/packages/*","/npm/*","/zig/*","/php/*","/commits/*","/health","/dashboard/*","/search","/login","/logout","/signup","/account","/account/*"]}shouldRouteStorageBucketToCompute(u,g){return u==="public"||g.routeCompute===!0}storageBucketName(u,g,h){return this.mergedConfig.infrastructure?.storage?.[h]?.bucket??`${u}-${g}-${h}`}fileSystemLogicalId(u,g,h){return t(r({slug:`${u}-${h}`,environment:g,resourceType:"efs"}))}resolveSftpStorage(u,g,h){let S=u.storage;if(S?.type==="efs"&&S.fileSystem){if(!this.mergedConfig.infrastructure?.fileSystem?.[S.fileSystem])throw Error(`sftp: storage.fileSystem "${S.fileSystem}" is not defined in infrastructure.fileSystem`);return{type:"efs",fileSystemId:{Ref:this.fileSystemLogicalId(g,h,S.fileSystem)},posixProfile:S.posixProfile}}if(S?.type==="s3"&&S.storageBucket){if(!this.mergedConfig.infrastructure?.storage?.[S.storageBucket])throw Error(`sftp: storage.storageBucket "${S.storageBucket}" is not defined in infrastructure.storage`);return{type:"s3",bucket:this.storageBucketName(g,h,S.storageBucket)}}return}resolveComputeCachePathPatterns(u){if(u&&u.length>0)return u;return this.defaultComputeCachePathPatterns()}createComputeCacheBehavior(u,g){return{PathPattern:u,TargetOriginId:g,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac"}}appendComputeAppOrigin(u,g,h,S,A,T){let P=this.serverEipLogicalIds.get("app"),M=this.serverEipLogicalIds.get("appInstance");if(!P)return;let W=`EC2-${S}-${A}-api`,le=this.mergedConfig.infrastructure?.servers?.app?.region||this.mergedConfig.project?.region||"us-east-1",K=le==="us-east-1"?".compute-1.amazonaws.com":`.${le}.compute.amazonaws.com`,Ct={"Fn::Join":["",["ec2-",{"Fn::Join":["-",{"Fn::Split":[".",{Ref:P}]}]},K]]},Tt=this.resolveApiOriginPort();if(u.push({Id:W,DomainName:Ct,CustomOriginConfig:{HTTPPort:Tt,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}),h.push(P),M)h.push(M);for(let He of T)g.push(this.createComputeCacheBehavior(He,W))}buildCaddyfile(u){let g=u.filter(([,A])=>typeof A.domain==="string"&&A.domain&&typeof A.port==="number");if(g.length===0)return;let h=new Map;for(let[,A]of g){let T=h.get(A.domain)??[];T.push({port:A.port,path:A.path}),h.set(A.domain,T)}let S=[];for(let[A,T]of h){let M=[...T].sort((W,le)=>{let K=!W.path||W.path==="/",Ct=!le.path||le.path==="/";if(K&&!Ct)return 1;if(!K&&Ct)return-1;return(le.path?.length??0)-(W.path?.length??0)}).map((W)=>{let le=!W.path||W.path==="/",K=`reverse_proxy localhost:${W.port}`;return le?`  handle {
+import{JI,XI,gl,Pm,pl,ml,ln,H,l,fl,km,J,hl,p,py,C,rt,Zi,un,R,ge,Al,my,r,t,YI,ZI,m,eb,tb,rb,nb,ib,ur,yl,es,fy,sb,ob,$e,nt,Sl,Nm,Bm,ab,xm,Om,_m,Wo,Il,pe,gn,Nt,Jo,Bt,we,hy,bl,Xo,Lm,$m,Mm,Fm,Cl,cb,X,v,Ay,yy,Um,a,I,it,f,Qm,st,Y,xt,db,Hm,Z,El,Me,gr,Yo,me,vl,fe,Sy,Zo,ee,te,L,ts,D,pr,Ot,re,e,pn,lb,Gm,Tl,ub,gb,pb,mb,wl,fb,hb,Ab,yb,Sb,Ib,bb,Cb,Eb,vb,Tb,wb,Iy,by,Cy,Ey,vy,Ty,wy,mr,Vm,qm,fr,rs,Rb,jm,Db,Pb,mn,kb,Nb,Bb,xb,Ob,_b,zm,k,Re,ns,ea,fn,is,ta,Ry,Lb,ss,ra,Dy,Py,ky,Ny,By,xy,os,$b,na,Oy,Km,q,_y,ot,ia,_t,Ly,Wm,$y,My,Fy,Jm,j,Mb,Fb,Ub,Qb,Uy,Hb,ne,Gb,Vb,qb,Rl,Dl,Qy,Xm,Ym,jb,zb,Kb,Wb,Jb,Hy,Pl,Xb,Yb,Zb,eC,tC,Gy,Vy,rC,nC,iC,sC,oC,aC,cC,qy,dC,Zm,kl,lC,uC,gC,pC,ef,tf,rf,mC,Nl,jy,zy,Ky,Wy,Bl,Jy,fC,hC,AC,yC,SC,IC,bC,Xy,Yy,Zy,eS,nf,CC,EC,vC,TC,wC,RC,DC,PC,kC,tS,rS,nS,iS,NC,BC,sf,xC,of,af,cf,df,OC,_C,LC,$C,Fe,as,MC,FC,UC,QC,HC,GC,VC,qC,sS,jC,zC,lf,uf,KC,WC,oS,JC,XC,YC,ZC,eE,tE,rE,nE,iE,sE,oE,aE,cE,dE,lE,uE,gE,pE,mE,fE,hE,xl,aS,Ol,cS,_l,dS,Ll,lS,$l,uS,hr,gS,Ml,pS,cs,mS,Fl,fS,Ul,hS,gf,AE,pf,yE,Ql,AS,Ar,yS,mf,SE,Hl,SS,ff,IE,hf,bE,Af,CE,Gl,IS,yf,EE,Sf,vE,If,TE,bf,wE,Vl,bS,ql,CS,Cf,RE,Ef,DE,vf,PE,Tf,kE,wf,NE,Rf,BE,jl,ES,Df,xE,Pf,OE,kf,_E,Nf,LE,Bf,$E,xf,ME,Of,_f,Lf,$f,Mf,FE,Ff,UE,Uf,QE,Qf,HE,at,Hf,vS,sa,zl,hn,TS,ds,yr,Kl,Wl,wS,RS,Jl,Gf,Xl,Vf,GE,VE,oa,aa,ca,Yl,An,Zl,eu,ls,da,la,qf,DS,PS,kS,qE,jf,zf,jE,NS,Kf,BS,xS,OS,zE,Wf,yn,tu,Jf,KE,_S,ua,ga,ru,Xf,WE,nu,LS,Yf,JE,Zf,XE,eh,YE}from"./chunk-316cbffs.js";import{iu,N,su,pa,FS,th,US,QS,HS,GS,VS,qS,jS,zS}from"./chunk-3t5a5gr2.js";import{Sa,rh,pu,WS,fs,mu,Ia,nh,ih,In,ba,fu,ct,hu,Au,yu,hs,bn,sh,dt,Su,Ca,Ea,va,Iu,bu,Cu,As,Ta,Eu,Cn,ys,wa,Lt,oh,vu,Tu,ah,wu,Ra,Sr,Ru,Du,Pu,ku,lt,ch,Nu,Ir,Da,Pa,ka,Ss,Is,En,Bu,bs,Na,Ba,vn,xu,Tn,dh,lh,$t,wn,xa,uh,Ou,_u,Oa,Lu,$u,Mu,JS,he,Fu,XS,YS,Cs,Es,ZS,De,gh,Mt,Ue,Qe,Ft,Uu,Qu,Hu,Gu,ph,mh,_a,fh,hh,La,Vu,qu,Ah,Ae,yh,ju,Pe,$a,ut,Ut,Qt,Rn,vs,zu,eI,Sh,Ih,bh,Ch,Ma,Fa,Ku,Ua,Dn,Qa,Wu,Ts,Ju,Ha,Ga,Va,qa,ja,za,Ka,Wa,Xu,br,Ja,Yu,Pn,Zu,Xa,Ya,eg,Cr,Za,ec,Eh,tI,ws,rI,nI,iI,tc,rc,tg,vh,nc,kn,rg,Rs,ng,ig,sg,ic,Th,sc,og,wh,oc,Rh,Nn,Bn,ag,Ds,pg,Ag,yg,Sg,Ig,bg,ks,Er,cc,xn,On,vr,gt,_h,lc,Lh,$h,vg,uc,Bs,Tg,gc,Gt,Ge,wg,pc,mc,Rg,fc,hc,Ac,yc,Dg,Pg,Ln,Sc,Ic,bc,Cc,kg,xs,$n,Os,Ec}from"./chunk-jcxm737x.js";import{gu}from"./chunk-tes38y8x.js";import{Q,Wr,Rd,vo,d,nm,im}from"./chunk-zpkf2jt2.js";import{wt,wd,Li,$i,Mi,rm}from"./chunk-bxq80y73.js";import{pA,mA,fA,$p,Mp,Fp,hA,Up,Qp,AA,yA,Hp,SA,IA,vd,Gp,bA,CA,Vp,EA,vA,TA,wA,RA,DA,PA,_i,Td,qp,jp,zp,Kp,Wp,Jp,Xp,Yp,Zp,em,tm,kA,NA,BA,xA,OA,_A,LA}from"./chunk-xa2ahxxa.js";import{Ze,Dd,Te,ir,Pd,O,sr,Rt,kd,To,FA,sm,Nd,s,Fi,wo,Jr,Bd,xd,Xr,UA,Od,jI,zI,Ro,KI,WI,_d,Ld,Ui,Do,ue,c,Po,et,Yr,QA,HA,$d,GA,ko,VA,qA,No,Md,Zr,Bo,jA,or,Fd,om,ar,en,zA,xo,KA,_,WA,Ud,am,Oo,JA,XA,YA,Qd,Qi,_o,Hd,cr,Dt,ZA,tn,ey,Gd,cm,dm,Lo,Vd,qd,Pt,lm,Hi,jd,$o,rn,um,Gi,zd,Kd,Vi,gm,Wd,Jd,Xd,Yd,Mo,pm,mm,ty,fm,Zd,qi,hm,Am,Fo,nn,Uo,Qo,Ho,el,ym,tl,Go,ry,dr,ny,rl,sn,nl,iy,il,Sm,ji,on,Vo,zi,tt,sy,Im,bm,lr,sl,ol,al,Ki,Wi,Ji,oy,ay,kt,qo,cy,an,Cm,jo,dy,Em,vm,Tm,ly,wm,Rm,uy,i,gy,Xi,zo,Ko}from"./chunk-n6tgqd7d.js";import{n}from"./chunk-vaczx33v.js";import{Be,ht,Wn}from"./chunk-kken64a9.js";import{ke,Qs,Hs,xg,Dc,Pc,Gs,kc,pt,ie,mt,ye,w,Ne,Hn,Nc,Ve,Bc,Gn,Vn,qn,Vt,qt,jt,jn,wr,xc,Rr,Dr,ft,zn,_c,zt,Pr,Kn,$c,Mg,Fg,Mc,kr}from"./chunk-4bysqvjh.js";import{o}from"./chunk-byt4re1c.js";import{y}from"./chunk-cjqw4ns4.js";import{jr,Le}from"./chunk-93xknw91.js";import{Fc,qe,b}from"./chunk-4afz3x6w.js";import{E}from"./chunk-p1agrrnq.js";import{At,be,ze,Ug,Kt,Uc,Qc,Wt,G,Jn,Jt,Xt,Xn,zs,Ks,Nr,Br,Yn,xr,Ws,Js,Xs,Ys,oe,Zs,eo,to,ro,Ce,no,io,so,B,Hc,Zn,Gc,Ee,Or}from"./chunk-1kagq9vp.js";import{je}from"./chunk-7y1pknej.js";import{se}from"./chunk-sp0ne2ax.js";import{Qg,Vc,Hg,ae,qc,ei,Gg,jc,Vg,qg,Jh,Lr,ao,F,Mr,ri,ni,Fr,Qr,ii,co,si,oi,ai,ci,li,Hr,ve,Wc,St,Jc,Gr,Zc,We,ce,Je,Xe,bt,pi,mi,xe,Et,Oe,hi,Ai,yi,Si,Ii,bi,Ci,Vr,U,po,Ap,cd,vi,Ti,wi,Ri,md,fo,fd,rr,Pi,ho,Ao,hd,ki,Ad}from"./chunk-ybhjh309.js";import{So,bo,Co,x,Op,_e}from"./chunk-bzdfx427.js";import{ou,ma,gs,ps,fa,au,cu,ms,ha,Aa,lu,uu,ya}from"./chunk-r2gtxb7n.js";import{vc,Mn,Un,_s,Ls,$s,Ms,Tc,wc}from"./chunk-z1087cap.js";import{Rc}from"./chunk-stqg97mh.js";import{de,Ni,yo,yd,Bi,Np}from"./chunk-wggeew90.js";import{cl,cn,dl,ll,ul,Yi,Dm,dn}from"./chunk-x1k1sbgf.js";import{$S,us}from"./chunk-wnevarf9.js";var tR="https://api.machines.dev/v1";class Io extends Error{status;path;constructor(u,g,h){super(u);this.status=g;this.path=h;this.name="FlyApiError"}}function sd(u){let g=u.ip.includes(":");if(g&&u.ip.startsWith("fdaa:"))return"private_v6";if(u.shared)return"shared_v4";return g?"v6":"v4"}class hp{token;fetch;constructor(u){if(!u.token)throw Error("Fly.io needs an API token: set FLY_API_TOKEN (`fly tokens create deploy` makes one scoped to an app).");this.token=u.token,this.fetch=u.fetch??fetch}async rest(u,g,h={}){let S=new URL(`https://api.machines.dev/v1${g}`);for(let[M,W]of Object.entries(h.query??{}))S.searchParams.set(M,W);let A=await this.fetch(S,{method:u,headers:{Authorization:`Bearer ${this.token}`,...h.body!==void 0?{"Content-Type":"application/json"}:{},...h.headers},body:h.body===void 0?void 0:JSON.stringify(h.body)});if(A.status===404&&h.notFound==="null")return null;let T=await A.text(),P=T?yp(T):void 0;if(!A.ok){let M=typeof P==="object"&&P&&"error"in P?String(P.error):T||A.statusText;throw new Io(`Fly.io ${u} ${g} failed (${A.status}): ${M}`,A.status,g)}return P}getApp(u){return this.rest("GET",`/apps/${encodeURIComponent(u)}`,{notFound:"null"})}createApp(u,g){return this.rest("POST","/apps",{body:{app_name:u,org_slug:g}})}async listMachines(u){return await this.rest("GET",`/apps/${encodeURIComponent(u)}/machines`)??[]}createMachine(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/machines`,{body:g})}updateMachine(u,g,h,S){return this.rest("POST",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}`,{body:h,headers:{"fly-machine-lease-nonce":S}})}async acquireLease(u,g,h=120){let A=(await this.rest("POST",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/lease`,{body:{ttl:h}})).data?.nonce;if(!A)throw new Io(`Fly.io gave no lease nonce for Machine ${g}`,200,`/machines/${g}/lease`);return A}async releaseLease(u,g,h){await this.rest("DELETE",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/lease`,{headers:{"fly-machine-lease-nonce":h}})}async waitForState(u,g,h,S={}){await this.rest("GET",`/apps/${encodeURIComponent(u)}/machines/${encodeURIComponent(g)}/wait`,{query:{state:h,timeout:String(S.timeoutSeconds??60),...S.instanceId?{instance_id:S.instanceId}:{}}})}async listVolumes(u){return await this.rest("GET",`/apps/${encodeURIComponent(u)}/volumes`)??[]}createVolume(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/volumes`,{body:{...g,encrypted:!0}})}async setSecrets(u,g){return(await this.rest("POST",`/apps/${encodeURIComponent(u)}/secrets`,{body:{values:g}})).version}async listIpAssignments(u){return(await this.rest("GET",`/apps/${encodeURIComponent(u)}/ip_assignments`)).ips??[]}async assignIp(u,g){let h=await this.rest("POST",`/apps/${encodeURIComponent(u)}/ip_assignments`,{body:{type:g}});if(!h.ip)throw new Io(`Fly.io assigned no ${g} address to ${u}`,200,`/apps/${u}/ip_assignments`);return{ip:h.ip,shared:h.shared??g==="shared_v4",region:h.region}}async requestCertificate(u,g){return this.rest("POST",`/apps/${encodeURIComponent(u)}/certificates/acme`,{body:{hostname:g}})}}function yp(u){try{return JSON.parse(u)}catch{return}}var Lc="ts-cloud-role";function iR(u,g){let h=u.fly??{},S=h.app??`${u.project.slug}-${g.environment}`;if(!/^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/.test(S))throw Error(`"${S}" is not a valid Fly app name: lowercase letters, digits and dashes, 3 to 63 characters.`);let A=h.internalPort??3000,T=h.count??1;if(!Number.isInteger(T)||T<1)throw Error(`fly.count must be a whole number of at least 1, got ${T}.`);return{app:S,org:h.org??"personal",image:g.image,regions:h.regions?.length?h.regions:["iad"],count:T,internalPort:A,healthPath:h.healthPath??"/",vm:{cpuKind:h.vm?.cpuKind??"shared",cpus:h.vm?.cpus??1,memoryMb:h.vm?.memoryMb??512},...h.volume?{volume:{name:h.volume.name??"data",sizeGb:h.volume.sizeGb,path:h.volume.path}}:{},autoStop:h.autoStop??!1,env:{...g.env,PORT:String(A)},secrets:g.secrets??{},hostnames:h.hostnames??[],release:g.release}}function Cp(u){return{image:u.image,env:u.env,guest:{cpu_kind:u.vm.cpuKind,cpus:u.vm.cpus,memory_mb:u.vm.memoryMb},services:[{protocol:"tcp",internal_port:u.internalPort,ports:[{port:80,handlers:["http"],force_https:!0},{port:443,handlers:["tls","http"]}],autostop:u.autoStop?"stop":"off",autostart:!0,...u.autoStop?{min_machines_running:0}:{},checks:[{type:"http",method:"GET",path:u.healthPath,interval:"15s",timeout:"5s",grace_period:"10s"}]}],restart:{policy:"on-failure",max_retries:10},metadata:{[Lc]:"app","ts-cloud-release":u.release}}}async function oR(u,g,h=()=>{}){let S=!1;if(!await u.getApp(g.app))h(`Creating Fly app ${g.app} in ${g.org}`),await u.createApp(g.app,g.org),S=!0;let A;if(Object.keys(g.secrets).length>0)A=await u.setSecrets(g.app,g.secrets),h(`Set ${Object.keys(g.secrets).length} secret(s) (version ${A})`);let T=await u.listIpAssignments(g.app),P=new Set(T.map(sd));if(!P.has("v6"))T.push(await u.assignIp(g.app,"v6")),h("Assigned a dedicated IPv6");if(!P.has("v4")&&!P.has("shared_v4"))T.push(await u.assignIp(g.app,"shared_v4")),h("Assigned a shared IPv4");let M=Cp(g),W=(await u.listMachines(g.app)).filter((Se)=>{let Ie=Se.config?.metadata??{};if(Ie[Lc])return Ie[Lc]==="app";return!Ie.fly_process_group||Ie.fly_process_group==="app"}),le=g.volume?await u.listVolumes(g.app):[],K=[],Ct=[],Tt=new Set;for(let Se of g.regions){let Ie=W.filter((z)=>z.region===Se).sort((z,Ye)=>z.id.localeCompare(Ye.id));for(let z=0;z<g.count;z++){let Ye=Ie[z];if(Ye){Tt.add(Ye.id),await Sp(u,g.app,Ye,M,A),Ct.push(Ye.id),h(`Updated ${Ye.id} (${Se}) to ${g.image}`);continue}let V=g.volume?[{volume:(await Rp(u,g,Se,le)).id,path:g.volume.path}]:void 0,Ke=await u.createMachine(g.app,{region:Se,name:`${g.app}-${Se}-${z+1}`,config:{...M,...V?{mounts:V}:{}},...A!==void 0?{min_secrets_version:A}:{}});await u.waitForState(g.app,Ke.id,"started",{instanceId:Ke.instance_id}),K.push(Ke.id),h(`Created ${Ke.id} in ${Se}`)}}let He=[];for(let Se of g.hostnames)He.push(await u.requestCertificate(g.app,Se));return{app:g.app,url:`https://${g.app}.fly.dev`,createdApp:S,created:K,updated:Ct,untouched:W.filter((Se)=>!Tt.has(Se.id)).map((Se)=>Se.id),ips:T,certificates:He}}async function Sp(u,g,h,S,A){let T=await u.acquireLease(g,h.id);try{let P=await u.updateMachine(g,h.id,{config:{...S,...h.config?.mounts?.length?{mounts:h.config.mounts}:{}},...A!==void 0?{min_secrets_version:A}:{}},T);await u.waitForState(g,h.id,"started",{instanceId:P.instance_id})}finally{await u.releaseLease(g,h.id,T)}}async function Rp(u,g,h,S){let A=S.find((P)=>P.region===h&&P.name===g.volume.name&&!P.attached_machine_id);if(A)return A.attached_machine_id="pending",A;let T=await u.createVolume(g.app,{name:g.volume.name,region:h,size_gb:g.volume.sizeGb});return S.push({...T,attached_machine_id:"pending"}),T}import{createHmac as ad,createSign as bp,timingSafeEqual as Pp}from"node:crypto";function Di(u){let g=u instanceof Date?u.getTime():u;if(!Number.isFinite(g))throw TypeError("Media access timestamp must be finite");return Math.floor(g/1000)}function ld(u){return Buffer.from(u).toString("base64").replaceAll("+","-").replaceAll("=","_").replaceAll("/","~")}function Tp(u){return Buffer.from(u).toString("base64url")}function ud(u,g=!1){if(!u||/[\r\n]/.test(u))throw TypeError("Media resource is invalid");let h=g?u.replaceAll("*","wildcard"):u,S=new URL(h);if(!["http:","https:"].includes(S.protocol))throw TypeError("Media resource must use HTTP or HTTPS");if(!g&&u.includes("*"))throw TypeError("Canned policies cannot contain wildcards")}function dd(u,g){let h=bp("RSA-SHA1");return h.update(u),h.end(),ld(h.sign(g))}function pd(u){ud(u.resource,!0);let h={DateLessThan:{"AWS:EpochTime":Di(u.expiresAt)}};if(u.activeAt!==void 0)h.DateGreaterThan={"AWS:EpochTime":Di(u.activeAt)};if(u.ipAddress)h.IpAddress={"AWS:SourceIp":u.ipAddress};return JSON.stringify({Statement:[{Resource:u.resource,Condition:h}]})}function dR(u,g,h){ud(u);let S=Di(g),A=u.includes("?")?"&":"?",T=pd({resource:u,expiresAt:g}),P=dd(T,h.privateKey);return`${u}${A}Expires=${S}&Signature=${encodeURIComponent(P)}&Key-Pair-Id=${encodeURIComponent(h.keyPairId)}`}function pR(u,g){let h=pd(u);return{"CloudFront-Key-Pair-Id":g.keyPairId,"CloudFront-Policy":ld(Buffer.from(h)),"CloudFront-Signature":dd(h,g.privateKey)}}function mR(u){if(!u.resource||/[\r\n]/.test(u.resource))throw TypeError("Media resource is invalid");let g=Tp(Buffer.from(JSON.stringify({resource:u.resource,expiresAt:Di(u.expiresAt),...u.keyId?{keyId:u.keyId}:{},...u.audience?{audience:u.audience}:{}}))),h=ad("sha256",u.secret).update(g).digest("base64url");return`${g}.${h}`}function gR(u,g){let[h,S,A]=u.split(".");if(!h||!S||A)return null;let T=ad("sha256",g.secret).update(h).digest(),P;try{P=Buffer.from(S,"base64url")}catch{return null}if(T.length!==P.length||!Pp(T,P))return null;try{let M=JSON.parse(Buffer.from(h,"base64url").toString("utf8")),W=Di(g.now??Date.now());if(!M.resource||!Number.isSafeInteger(M.expiresAt)||M.expiresAt<=W)return null;if(g.resource&&M.resource!==g.resource)return null;if(g.audience&&M.audience!==g.audience)return null;return M}catch{return null}}function fR(u,g=!1){let h=new URL(u,"https://media.invalid").pathname.toLowerCase(),S=/\.(?:m3u8|mpd|vtt|json)$/.test(h),A=/\.(?:key|license)$/.test(h)||h.includes("/keys/")||h.includes("/licenses/");return{"Accept-Ranges":"bytes","Cache-Control":g&&(S||A)?"private, no-store":S?"public, max-age=5, s-maxage=30, stale-while-revalidate=30":"public, max-age=31536000, immutable","Cross-Origin-Resource-Policy":"cross-origin","X-Content-Type-Options":"nosniff"}}function hR(u){if(!/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(u.bucket))throw TypeError("Media bucket is invalid");if(!/^[a-z0-9-]+$/.test(u.region))throw TypeError("Media bucket region is invalid");let g=u.prefix?`/${u.prefix.replace(/^\/+|\/+$/g,"")}`:"",h=u.protected??!1,S="public, max-age=31536000, immutable",A=h?"private, no-store":"public, max-age=5, s-maxage=30, stale-while-revalidate=30";return{originDomain:`${u.bucket}.s3.${u.region}.amazonaws.com`,originPath:g,domain:u.domain,trustedKeyGroupIds:[...new Set(u.trustedKeyGroupIds??[])],behaviors:[{pathPattern:"*.m3u8",cacheControl:A,compress:!0,signed:h},{pathPattern:"*.mpd",cacheControl:A,compress:!0,signed:h},{pathPattern:"*.vtt",cacheControl:A,compress:!0,signed:h},{pathPattern:"*",cacheControl:S,compress:!1,signed:h}],responseHeaders:{"Access-Control-Allow-Headers":"Range, If-Range","Access-Control-Allow-Methods":"GET, HEAD, OPTIONS","Access-Control-Allow-Origin":"*","Access-Control-Expose-Headers":"Accept-Ranges, Content-Length, Content-Range, ETag","X-Content-Type-Options":"nosniff"}}}class wp{builder;config;environment;mergedConfig;serverEipLogicalIds=new Map;storageFailoverReplicas=[];constructor(u){this.config=u.config,this.environment=u.environment,this.builder=new Al(`${this.config.project.name} - ${this.environment}`),this.mergedConfig=this.mergeEnvironmentConfig()}mergeEnvironmentConfig(){let g=this.config.environments[this.environment]?.infrastructure;if(!g)return this.config;return{...this.config,infrastructure:{...this.config.infrastructure,...g,compute:{...this.config.infrastructure?.compute,...g.compute},storage:{...this.config.infrastructure?.storage,...g.storage},functions:{...this.config.infrastructure?.functions,...g.functions},servers:{...this.config.infrastructure?.servers,...g.servers},databases:{...this.config.infrastructure?.databases,...g.databases},cdn:{...this.config.infrastructure?.cdn,...g.cdn},sftp:g.sftp??this.config.infrastructure?.sftp,queues:{...this.config.infrastructure?.queues,...g.queues},redirects:{...this.config.infrastructure?.redirects,...g.redirects},realtime:{...this.config.infrastructure?.realtime,...g.realtime},cache:{...this.config.infrastructure?.cache,...g.cache},fileSystem:{...this.config.infrastructure?.fileSystem,...g.fileSystem},email:{...this.config.infrastructure?.email,...g.email},search:{...this.config.infrastructure?.search,...g.search},ai:{...this.config.infrastructure?.ai,...g.ai}}}}shouldDeploy(u){if(u.environments&&!u.environments.includes(this.environment))return!1;if(u.requiresFeatures){let g=this.config.features||{};if(!u.requiresFeatures.every((S)=>g[S]===!0))return!1}if(u.regions){let g=this.config.environments[this.environment]?.region||this.config.project.region;if(!u.regions.includes(g))return!1}if(u.condition&&typeof u.condition==="function")return u.condition(this.config,this.environment);return!0}resolveApiOriginPort(){let u=this.mergedConfig.infrastructure?.api?.port??this.mergedConfig.ports?.api,g=Number(u||3008);return Number.isFinite(g)&&g>0?g:3008}defaultComputeCachePathPatterns(){return["/api/*","/auth/*","/publisher/api/*","/publisher/*","/publish","/publish/*","/analytics/*","/packages/*","/npm/*","/zig/*","/php/*","/commits/*","/health","/dashboard/*","/search","/login","/logout","/signup","/account","/account/*"]}shouldRouteStorageBucketToCompute(u,g){return u==="public"||g.routeCompute===!0}storageBucketName(u,g,h){return this.mergedConfig.infrastructure?.storage?.[h]?.bucket??`${u}-${g}-${h}`}fileSystemLogicalId(u,g,h){return t(r({slug:`${u}-${h}`,environment:g,resourceType:"efs"}))}resolveSftpStorage(u,g,h){let S=u.storage;if(S?.type==="efs"&&S.fileSystem){if(!this.mergedConfig.infrastructure?.fileSystem?.[S.fileSystem])throw Error(`sftp: storage.fileSystem "${S.fileSystem}" is not defined in infrastructure.fileSystem`);return{type:"efs",fileSystemId:{Ref:this.fileSystemLogicalId(g,h,S.fileSystem)},posixProfile:S.posixProfile}}if(S?.type==="s3"&&S.storageBucket){if(!this.mergedConfig.infrastructure?.storage?.[S.storageBucket])throw Error(`sftp: storage.storageBucket "${S.storageBucket}" is not defined in infrastructure.storage`);return{type:"s3",bucket:this.storageBucketName(g,h,S.storageBucket)}}return}resolveComputeCachePathPatterns(u){if(u&&u.length>0)return u;return this.defaultComputeCachePathPatterns()}createComputeCacheBehavior(u,g){return{PathPattern:u,TargetOriginId:g,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac"}}appendComputeAppOrigin(u,g,h,S,A,T){let P=this.serverEipLogicalIds.get("app"),M=this.serverEipLogicalIds.get("appInstance");if(!P)return;let W=`EC2-${S}-${A}-api`,le=this.mergedConfig.infrastructure?.servers?.app?.region||this.mergedConfig.project?.region||"us-east-1",K=le==="us-east-1"?".compute-1.amazonaws.com":`.${le}.compute.amazonaws.com`,Ct={"Fn::Join":["",["ec2-",{"Fn::Join":["-",{"Fn::Split":[".",{Ref:P}]}]},K]]},Tt=this.resolveApiOriginPort();if(u.push({Id:W,DomainName:Ct,CustomOriginConfig:{HTTPPort:Tt,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}),h.push(P),M)h.push(M);for(let He of T)g.push(this.createComputeCacheBehavior(He,W))}buildCaddyfile(u){let g=u.filter(([,A])=>typeof A.domain==="string"&&A.domain&&typeof A.port==="number");if(g.length===0)return;let h=new Map;for(let[,A]of g){let T=h.get(A.domain)??[];T.push({port:A.port,path:A.path}),h.set(A.domain,T)}let S=[];for(let[A,T]of h){let M=[...T].sort((W,le)=>{let K=!W.path||W.path==="/",Ct=!le.path||le.path==="/";if(K&&!Ct)return 1;if(!K&&Ct)return-1;return(le.path?.length??0)-(W.path?.length??0)}).map((W)=>{let le=!W.path||W.path==="/",K=`reverse_proxy localhost:${W.port}`;return le?`  handle {
     ${K}
   }`:`  handle ${W.path} {
     ${K}

package/dist/ui/404.html

@@ -2,7 +2,7 @@
 <html lang="en" data-theme="dark">
 <head>
   <meta charset="UTF-8">
-  <meta name="stx-build" content="mw38igaueafe2f">
+  <meta name="stx-build" content="mw5m8jtm7akns4">
 
 <!-- stx SEO Tags -->
 <meta name="title" content="Page not found · ts-cloud">

package/dist/ui/accept-invitation.html

@@ -1,4 +1,4 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw38cr1cy9hsmq"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Accept invitation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.616c25f3.css"></head><body class="auth-page"><main class="auth-card" id="main-content"><a class="brand" href="/"><span class="dot"></span><span>ts-cloud</span></a><div><span class="context-label">Organization invitation</span><h1>Join your team</h1><p>Choose the dashboard username and password you will use after this invitation is accepted.</p></div><form id="accept-invitation-form" class="auth-form"><div class="field-block"><label for="invite-name">Name</label><input id="invite-name" name="name" autocomplete="name" placeholder="Chris Breuer"></div><div class="field-block"><label for="invite-username">Username</label><input id="invite-username" name="username" autocomplete="username" minlength="2" maxlength="32" required></div><div class="field-block"><label for="invite-password">Password</label><input id="invite-password" name="password" type="password" autocomplete="new-password" minlength="12" required><small>At least 12 characters.</small></div><button class="btn" type="submit">Accept invitation</button><div id="invitation-status" class="auth-status" role="status"></div></form><p class="note">If this link expired or was already used, ask an organization owner to resend the invitation.</p></main> <script data-stx-scoped data-stx-run="always">
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw5m3j4uae33p7"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Accept invitation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.616c25f3.css"></head><body class="auth-page"><main class="auth-card" id="main-content"><a class="brand" href="/"><span class="dot"></span><span>ts-cloud</span></a><div><span class="context-label">Organization invitation</span><h1>Join your team</h1><p>Choose the dashboard username and password you will use after this invitation is accepted.</p></div><form id="accept-invitation-form" class="auth-form"><div class="field-block"><label for="invite-name">Name</label><input id="invite-name" name="name" autocomplete="name" placeholder="Chris Breuer"></div><div class="field-block"><label for="invite-username">Username</label><input id="invite-username" name="username" autocomplete="username" minlength="2" maxlength="32" required></div><div class="field-block"><label for="invite-password">Password</label><input id="invite-password" name="password" type="password" autocomplete="new-password" minlength="12" required><small>At least 12 characters.</small></div><button class="btn" type="submit">Accept invitation</button><div id="invitation-status" class="auth-status" role="status"></div></form><p class="note">If this link expired or was already used, ask an organization owner to resend the invitation.</p></main> <script data-stx-scoped data-stx-run="always">
 ;(function() {
   'use strict';
 (() => {

package/dist/ui/access-denied.html

@@ -1,4 +1,4 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw38cr1cy9hsmq"><meta name="title" content="Access unavailable · ts-cloud"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="Access unavailable · ts-cloud"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="Access unavailable · ts-cloud"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Access unavailable · ts-cloud</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_50" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw5m3j4uae33p7"><meta name="title" content="Access unavailable · ts-cloud"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="Access unavailable · ts-cloud"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="Access unavailable · ts-cloud"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Access unavailable · ts-cloud</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_50" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];

package/dist/ui/account/automation.html

@@ -1,5 +1,5 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw38cr1cy9hsmq"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - API &amp; automation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
-function __stx_setup_1793864075144_6() {
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw5m3j4uae33p7"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - API &amp; automation</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
+function __stx_setup_1794008091964_6() {
   const { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
 
 const accounts = state([]);
@@ -189,9 +189,9 @@ onMount(() => {
 
   return { accounts, project, environments, resources, message, messageKind, reveal, accountSlug, accountName, accountRole, accountScopeType, accountScopeId, selectedAccount, tokenName, tokenCapabilities, tokenScopeType, tokenScopeId, tokenExpiry, password, mfaCode, capabilities, setMessage, setScope, scopeLabel, tokenState, toggleCapability, load, selectAccount, stepUp, createAccount, createToken, tokenAction, disableAccount, curlExample, cliExample, copy };
 }
-window.__stx_latestSetup=__stx_setup_1793864075144_6;
-if(window.stx)window.stx._latestSetup=__stx_setup_1793864075144_6;
-</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1793864075144_6"><a data-stx-scope="stx_scope_nav_9" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="active" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+window.__stx_latestSetup=__stx_setup_1794008091964_6;
+if(window.stx)window.stx._latestSetup=__stx_setup_1794008091964_6;
+</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1794008091964_6"><a data-stx-scope="stx_scope_nav_9" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>ts-cloud</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="active" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>ts-cloud</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];

package/dist/ui/account/security.html

@@ -1,4 +1,4 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw38cr1cy9hsmq"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Sign-in &amp; security</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style> .security-layout { display: grid; grid-template-columns: minmax(0, 1fr) minmax(280px, .7fr); gap: 18px; align-items: start; } .security-stack { display: grid; gap: 18px; } .security-summary { display: grid; gap: 10px; } .security-summary .kv { padding: 8px 0; } .session-list { display: grid; gap: 10px; } .session-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 14px; align-items: center; padding: 13px; border: 1px solid var(--panel-br); border-radius: 11px; } .session-copy { display: grid; gap: 4px; min-width: 0; } .session-copy strong, .session-copy span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } .session-copy span { color: var(--txt3); font-size: 11px; } .security-form { display: grid; gap: 13px; } .security-form label { display: grid; gap: 6px; color: var(--txt3); font-size: 11px; font-weight: 800; text-transform: uppercase; letter-spacing: .06em; } .security-form input { width: 100%; } .security-status { min-height: 20px; color: var(--txt2); font-size: 12px; } .mfa-secret { display: block; margin: 9px 0; padding: 10px; overflow-wrap: anywhere; border: 1px solid var(--panel-br); border-radius: 9px; background: rgba(255,255,255,.025); color: var(--accent); font: 700 12px var(--mono); } .recovery-codes { display: grid; grid-template-columns: 1fr 1fr; gap: 6px; margin-top: 10px; } .recovery-codes code { padding: 7px; border: 1px solid var(--panel-br); border-radius: 7px; text-align: center; } .hidden { display: none !important; } @media (max-width: 900px) { .security-layout { grid-template-columns: 1fr; } } </style><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.222ed683.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_7" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>Project</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="active" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>Project</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw5m3j4uae33p7"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Sign-in &amp; security</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"><style> .security-layout { display: grid; grid-template-columns: minmax(0, 1fr) minmax(280px, .7fr); gap: 18px; align-items: start; } .security-stack { display: grid; gap: 18px; } .security-summary { display: grid; gap: 10px; } .security-summary .kv { padding: 8px 0; } .session-list { display: grid; gap: 10px; } .session-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 14px; align-items: center; padding: 13px; border: 1px solid var(--panel-br); border-radius: 11px; } .session-copy { display: grid; gap: 4px; min-width: 0; } .session-copy strong, .session-copy span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; } .session-copy span { color: var(--txt3); font-size: 11px; } .security-form { display: grid; gap: 13px; } .security-form label { display: grid; gap: 6px; color: var(--txt3); font-size: 11px; font-weight: 800; text-transform: uppercase; letter-spacing: .06em; } .security-form input { width: 100%; } .security-status { min-height: 20px; color: var(--txt2); font-size: 12px; } .mfa-secret { display: block; margin: 9px 0; padding: 10px; overflow-wrap: anywhere; border: 1px solid var(--panel-br); border-radius: 9px; background: rgba(255,255,255,.025); color: var(--accent); font: 700 12px var(--mono); } .recovery-codes { display: grid; grid-template-columns: 1fr 1fr; gap: 6px; margin-top: 10px; } .recovery-codes code { padding: 7px; border: 1px solid var(--panel-br); border-radius: 7px; text-align: center; } .hidden { display: none !important; } @media (max-width: 900px) { .security-layout { grid-template-columns: 1fr; } } </style><style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.222ed683.css"></head><body data-stx-auto><a data-stx-scope="stx_scope_nav_8" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>Project</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="active" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>Project</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];
@@ -349,7 +349,7 @@
   
   
   try { if (typeof __stxScopeRenames !== 'undefined' && __stxScopeRenames) { for (var __stxRK in __stxScopeRenames) __scopeRegistration[__stxRK] = __stxScopeRenames[__stxRK]; } } catch (e) { /* no renames */ }
-  window.stx._scopes['stx_scope_nav_7'] = __scopeRegistration;
+  window.stx._scopes['stx_scope_nav_8'] = __scopeRegistration;
 })();
 </script> <main class="wrap" id="main-content"><div class="crumbs"><a href="/">Account</a><span class="sep">/</span> Sign-in & security</div><header class="page"><div><h1>Sign-in & security</h1><p>Manage your password and review every browser session with access to this account.</p></div></header><div class="security-layout"><div class="security-stack"><section class="panel" aria-labelledby="sessions-title"><div class="section-heading"><div><h2 id="sessions-title">Active sessions</h2><p class="note">Last-used times and device details help you spot unfamiliar access.</p></div><button class="btn ghost sm" id="revoke-others" type="button">Sign out other sessions</button></div><div class="session-list" id="session-list" aria-live="polite"><div class="compact empty"><strong>Loading sessions…</strong></div></div></section></div><div class="security-stack"><section class="panel security-summary" aria-labelledby="identity-title"><h2 id="identity-title">Identity</h2><div class="kv"><span>Username</span><b id="identity-username">—</b></div><div class="kv"><span>Email</span><b id="identity-email">Not configured</b></div><div class="kv"><span>Last sign-in</span><b id="identity-login">—</b></div><div class="kv"><span>Multi-factor authentication</span><b id="identity-mfa">Loading…</b></div><details><summary>Confirm identity for sensitive changes</summary><form class="security-form" id="step-up-form"><label>Current password<input name="password" type="password" autocomplete="current-password" required></label><label>Authenticator or recovery code (when enabled)<input name="code" autocomplete="one-time-code"></label><button class="btn ghost" type="submit">Confirm identity</button><div class="security-status" id="step-up-status" role="status"></div></form></details></section><section class="panel" aria-labelledby="mfa-title"><h2 id="mfa-title">Authenticator app</h2><p class="note" id="mfa-copy">Add a time-based code as a second sign-in factor.</p><form class="security-form" id="mfa-enroll-form"><label>Current password<input name="password" type="password" autocomplete="current-password" required></label><button class="btn" type="submit">Set up authenticator</button></form><form class="hidden security-form" id="mfa-verify-form"><p class="note">Add this secret or setup URI to your authenticator app, then enter its six-digit code.</p><code class="mfa-secret" id="mfa-secret"></code><details><summary>Show full setup URI</summary><code class="mfa-secret" id="mfa-uri"></code></details><label>Six-digit code<input name="code" inputmode="numeric" autocomplete="one-time-code" pattern="[0-9]{6}" required></label><button class="btn" type="submit">Verify and enable</button></form><form class="hidden security-form" id="mfa-disable-form"><label>Current password<input name="password" type="password" autocomplete="current-password" required></label><label>Authenticator or recovery code<input name="code" autocomplete="one-time-code" required></label><button class="btn danger" type="submit">Disable MFA</button></form><div class="hidden recovery-codes" id="recovery-codes" aria-label="Recovery codes"></div><div class="security-status" id="mfa-status" role="status"></div></section><section class="panel" aria-labelledby="password-title"><h2 id="password-title">Change password</h2><p class="note">Changing your password rotates this session and immediately signs out every other session.</p><form class="security-form" id="password-form"><label>Current password<input name="currentPassword" type="password" autocomplete="current-password" required></label><label>New password<input name="password" type="password" autocomplete="new-password" minlength="12" required></label><label>Confirm new password<input name="confirmation" type="password" autocomplete="new-password" minlength="12" required></label><button class="btn" type="submit">Change password</button><div class="security-status" id="password-status" role="status"></div></form></section></div></div></main> <script data-stx-scoped data-stx-run="always">
 ;(function() {

package/dist/ui/applications/compose.html

@@ -1,5 +1,5 @@
-<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw38cr1cy9hsmq"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Compose applications</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
-function __stx_setup_1793864075143_5() {
+<!DOCTYPE html><html lang="en" data-theme="dark"><head><meta charset="UTF-8"><meta name="stx-build" content="mw5m3j4uae33p7"><meta name="title" content="stx Project"><meta name="description" content="A website built with stx templating engine"><meta property="og:title" content="stx Project"><meta property="og:description" content="A website built with stx templating engine"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:title" content="stx Project"><meta name="twitter:description" content="A website built with stx templating engine"> <script data-stx-runtime src="/_stx/runtime.dbee66d1.js"></script> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title>ts-cloud - Compose applications</title><link rel="icon" type="image/svg+xml" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect x='3' y='3' width='26' height='26' rx='8' fill='%235a8be0'/%3E%3C/svg%3E"><link rel="preconnect" href="https://fonts.googleapis.com"><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet"><link rel="stylesheet" href="/_stx/style.448ab192.css"> <script data-stx-scoped>
+function __stx_setup_1794008091960_5() {
   const { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
 
 const data = state({ applications: [], templates: [], environments: [] });
@@ -110,9 +110,9 @@ onMount(() => {
 
   return { data, message, diagnostics, source, selected, deleteState, output, post, refresh, environmentId, tone, preview, importStack, useTemplate, action, logs, shell };
 }
-window.__stx_latestSetup=__stx_setup_1793864075143_5;
-if(window.stx)window.stx._latestSetup=__stx_setup_1793864075143_5;
-</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1793864075143_5"><a data-stx-scope="stx_scope_nav_8" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>Project</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="active" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>Project</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
+window.__stx_latestSetup=__stx_setup_1794008091960_5;
+if(window.stx)window.stx._latestSetup=__stx_setup_1794008091960_5;
+</script> <style data-stx-cloak>[x-cloak]{display:none !important}</style><link data-crosswind="generated" rel="stylesheet" href="/_stx/crosswind.906ee17c.css"></head><body data-stx="__stx_setup_1794008091960_5"><a data-stx-scope="stx_scope_nav_7" class="skip-link" href="#main-content">Skip to content</a><button class="nav-toggle-button" type="button" aria-label="Open navigation" aria-controls="primary-navigation" aria-expanded="false"><span></span><span></span><span></span></button><button class="nav-scrim" type="button" aria-label="Close navigation"></button><aside class="app-sidebar" id="primary-navigation" aria-label="Primary navigation"><a class="brand" href="/?env=production"><span class="dot"></span><span>ts-cloud</span></a><div class="sidebar-context"><span class="context-label">Project</span><strong>Project</strong></div><div class="environment-picker" aria-label="Environment"><span class="context-label">Environment</span><details><summary class="environment-current production"><span>PROD</span><strong>production</strong></summary></details></div><button class="command-trigger" type="button" aria-keyshortcuts="Meta+K Control+K"><span>Search resources</span><kbd>⌘ K</kbd></button><div class="nav-groups"><section class="nav-group"><h2>Overview</h2><a class="" href="/?env=production">Dashboard</a><a href="/server/activity?env=production">Activity</a></section><section class="nav-group"><h2>Applications</h2><a class="" href="/server/sites?env=production">Services</a><a class="" href="/server/deployments?env=production">Deployments</a><a class="" href="/server/logs?env=production">Logs</a><a class="" href="/integrations?env=production">Git integrations</a><a class="" href="/applications/new?env=production">Create application</a><a class="active" href="/applications/compose?env=production">Compose applications</a></section><section class="nav-group"><h2>Operations</h2><a class="" href="/operations/queue?env=production">Deployment queue</a><a class="" href="/operations/previews?env=production">Preview environments</a><a class="" href="/operations/releases?env=production">Releases & promotion</a><a class="" href="/operations/regions?env=production">Regions & failover</a><a class="" href="/operations/maintenance?env=production">Maintenance & DR</a><a class="" href="/operations/workloads?env=production">Workloads</a><a class="" href="/operations/observability?env=production">Observability</a><a class="" href="/operations/alerts?env=production">Alerts & health</a><a class="" href="/operations/spend?env=production">Spend & budgets</a><a href="/server/metrics?env=production">Metrics</a><a href="/server/services?env=production">Runtime services</a><a class="" href="/operations/jobs?env=production">Workers & schedules</a><a class="" href="/operations/configuration?env=production">Environment &amp; secrets</a><a class="" href="/data/backups?env=production">Backups &amp; recovery</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/actions?env=production">Run operations</a></section><section class="nav-group"><h2>Infrastructure</h2><a class="" href="/infrastructure/topology?env=production">Infrastructure map</a><a class="" href="/data/services?env=production">Data services</a><a class="" href="/data/volumes?env=production">Persistent volumes</a><a href="/server/firewall?env=production">Network & firewall</a><a href="/server/ssh-keys?env=production">SSH keys</a><a class="" href="/server/fleet?env=production">Fleet inventory</a><a class="" href="/server/capacity?env=production">Capacity & placement</a><a href="/security?env=production">Security posture</a><a href="/server/terminal?env=production">Terminal</a></section><section class="nav-group"><h2>Organization</h2><a class="" href="/server/team?env=production">People & access</a><a class="" href="/account/automation?env=production">API & automation</a></section><section class="nav-group"><h2>Account</h2><a class="" href="/account/security?env=production">Sign-in & security</a></section></div><form method="post" action="/api/logout" class="signout"><button type="submit">Sign out</button></form></aside><dialog class="command-palette" aria-labelledby="command-title"><div class="command-search"><span aria-hidden="true">⌕</span><input type="search" placeholder="Search services, domains, deployments…" aria-label="Search resources" autocomplete="off"><button type="button" class="command-close" aria-label="Close search">Esc</button></div><h2 id="command-title" class="sr-only">Search resources and navigation</h2><div class="command-status" role="status">Start typing to search this project.</div><section class="saved-views" aria-labelledby="saved-views-title"><div class="saved-views-heading"><h3 id="saved-views-title">Saved views</h3><form class="save-view-form"><label class="sr-only" for="save-view-name">Saved view name</label><input id="save-view-name" maxlength="64" placeholder="Name this view" autocomplete="off"><button type="submit">Save current filters</button></form></div><div class="saved-view-list"></div></section><form class="tag-result-form"><label for="tag-result-name">Tag selected resource</label><input id="tag-result-name" maxlength="32" placeholder="customer-facing" pattern="[A-Za-z0-9][A-Za-z0-9 -]{0,31}" autocomplete="off"><input class="tag-color" type="color" value="#5a8be0" aria-label="Tag color"><button type="submit">Add tag</button></form><div class="command-results" role="listbox" aria-label="Search results"></div><footer><span>↑ ↓ navigate</span><span>Enter open</span><span>Esc close</span></footer></dialog><div class="context-bar" aria-label="Current scope"><div class="context-path"><div class="context-breadcrumb"><span>Project</span><i>/</i><strong>production</strong></div><div class="context-filters" aria-label="Active filters"></div></div><span class="scope-safety production">Production scope</span></div> <script data-stx-scoped data-stx-run="always">
 (function() {
   var { batch, computed, configureFetch, defineEmits, defineExpose, definePageMeta, defineProps, defineSlots, defineStore, derived, effect, goBack, goForward, inject, invalidateRoute, isDerived, isSignal, navigate, nextTick, onBeforeMount, onBeforeUnmount, onDestroy, onMount, onMounted, onUnmounted, peek, provide, reactive, ref, refresh, registerStoresClient, setRouteParams, state, untrack, useAsync, useClickOutside, useColorMode, useCookie, useCounter, useDark, useDebounce, useDebouncedValue, useEventListener, useFetch, useFocus, useHead, useId, useInterval, useLocalStorage, useMediaQuery, useMutation, useOptimistic, usePreferredContrast, usePreferredDark, usePreferredLight, usePreferredReducedMotion, useQuery, useReactiveProp, useRef, useRoute, useRouteParam, useRouteParams, useScrollLock, useSearchParams, useSeoMeta, useSessionStorage, useSlots, useStore, useThrottle, useTimeout, useToggle, useWebSocket, watch, watchEffect, watchMultiple, withDefaults } = window.stx;
   var __destroyHooks = [];
@@ -463,6 +463,6 @@ if(window.stx)window.stx._latestSetup=__stx_setup_1793864075143_5;
   
   
   try { if (typeof __stxScopeRenames !== 'undefined' && __stxScopeRenames) { for (var __stxRK in __stxScopeRenames) __scopeRegistration[__stxRK] = __stxScopeRenames[__stxRK]; } } catch (e) { /* no renames */ }
-  window.stx._scopes['stx_scope_nav_8'] = __scopeRegistration;
+  window.stx._scopes['stx_scope_nav_7'] = __scopeRegistration;
 })();
 </script> <main class="compose-wrap wrap" id="main-content"><div class="crumbs">Applications <span class="sep">/</span> Compose</div><header class="page"><div><h1>Compose applications</h1><p>Inspectable multi-service topology, pinned templates, health-aware deploys, and explicit data ownership.</p></div><button class="btn ghost" @click="refresh()">Refresh</button></header><p class="notice" @show="!!message()" x-cloak>{{message()}}</p><section class="section stats"><div class="panel"><small>Applications</small><strong x-cloak>{{data().applications.length}}</strong></div><div class="panel"><small>Running</small><strong x-cloak>{{data().applications.filter(v=>v.status==='running').length}}</strong></div><div class="panel"><small>Services</small><strong x-cloak>{{data().applications.reduce((n,v)=>n+Object.keys(v.manifest.spec.services).length,0)}}</strong></div><div class="panel"><small>Unhealthy</small><strong x-cloak>{{data().applications.flatMap(v=>v.services).filter(v=>['unhealthy','failed'].includes(v.status)).length}}</strong></div></section><section class="section"><div class="section-heading"><div><h2>Stacks and topology</h2><p class="note">Dependencies deploy in the shown order; health gates determine readiness.</p></div></div><div class="empty panel" @show="!data().applications.length" x-cloak><b>No Compose applications</b><span>Import a validated file or start from a pinned template.</span></div><div class="stack-grid" x-cloak><article class="panel stack" @each="item in data().applications" :key="item.id" x-cloak><div class="stack-head" x-cloak><div x-cloak><h3 x-cloak>{{item.name}}</h3><p class="mono note" x-cloak>{{item.slug}} · v{{item.version}}</p></div><span class="pill" :class="tone(item.status)" x-cloak>{{item.status}}</span></div><div class="topology" x-cloak><span @each="name in item.manifest.spec.dependencyOrder" x-cloak>{{name}}</span></div><div class="services" x-cloak><div class="service" @each="service in item.services" :key="service.serviceName" x-cloak><div x-cloak><b x-cloak>{{service.serviceName}}</b><small x-cloak>{{service.status}} · {{service.healthyReplicas}}/{{service.replicas}} healthy</small></div><div class="actions"></div></div></div><div class="domains" x-cloak><a @each="service in Object.values(item.manifest.spec.services).filter(v=>v.domains.length)" :href="'https://'+service.domains[0]" target="_blank" x-cloak>{{service.name}} · {{service.domains.join(', ')}}</a></div><div class="actions"><a class="btn ghost sm" href="/operations/queue">Operations</a></div><div class="delete" @show="deleteState().id===item.id" x-cloak><label class="check"><input type="checkbox" :checked="deleteState().removeVolumes" @change="deleteState.set({...deleteState(),removeVolumes:$event.target.checked,confirm:''})"> Permanently delete named volumes</label><p x-cloak>Type <b x-cloak>{{deleteState().removeVolumes?item.slug+' delete volumes':item.slug}}</b></p><input :value="deleteState().confirm" @input="deleteState.set({...deleteState(),confirm:$event.target.value})"><button class="btn danger sm" @click="action(item,'delete',{removeVolumes:deleteState().removeVolumes,confirm:deleteState().confirm})">Queue deletion</button></div></article></div></section><section class="diagnostics panel section" @show="diagnostics().length" x-cloak><h2>Conversion diagnostics</h2><div @each="issue in diagnostics()" class="diagnostic" :class="issue.severity" x-cloak><span x-cloak>{{issue.severity}}</span><code x-cloak>{{issue.path}}</code><b x-cloak>{{issue.message}}</b><small x-cloak>{{issue.alternative||''}}</small></div></section><section class="panel section" @show="!!output().text" x-cloak><div class="section-heading" x-cloak><h2 x-cloak>{{output().service}}</h2><button class="btn ghost xs" @click="output.set({service:'',text:''})">Close</button></div><pre x-cloak>{{output().text}}</pre></section></main><style>.compose-wrap{max-width:1480px}.page,.stack-head,.actions,.section-heading{display:flex;justify-content:space-between;gap:12px;align-items:flex-start}.stats{display:grid;grid-template-columns:repeat(4,1fr);gap:10px}.stats strong{display:block;font-size:1.7rem;margin-top:8px}.stack-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}.stack{display:grid;gap:14px}.stack h3,.template h3{margin:0}.topology{display:flex;flex-wrap:wrap;gap:6px}.topology span{background:var(--bg3);padding:6px 9px;border-radius:20px;font-size:11px}.topology span+span:before{content:'→';margin-right:7px;color:var(--txt3)}.services{display:grid;gap:7px}.service{display:flex;justify-content:space-between;gap:8px;align-items:center;border:1px solid var(--line);border-radius:8px;padding:9px}.service small{display:block;color:var(--txt3);margin-top:3px}.actions{justify-content:flex-start;flex-wrap:wrap}.delete{display:grid;gap:8px;border:1px solid rgba(235,90,90,.4);padding:12px;border-radius:8px}.delete p{margin:0}.check{display:flex;gap:8px}.authoring{display:grid;grid-template-columns:minmax(360px,.8fr) 1.2fr;gap:15px;align-items:start}.authoring form{display:grid;gap:10px}.authoring label{display:grid;gap:5px}.template-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:10px}.template{display:grid;gap:10px}.template dl{display:grid;gap:7px;margin:0}.template dt{font-size:10px;color:var(--txt3)}.template dd{margin:2px 0;font-size:12px}.diagnostic{display:grid;grid-template-columns:70px 220px 1fr;gap:8px;padding:8px;border-top:1px solid var(--line)}.diagnostic.error{color:#ffadad}.diagnostic.warning{color:#ffd58a}.diagnostic small{grid-column:3}pre{max-height:420px;overflow:auto}.empty span{display:block;color:var(--txt3);margin-top:5px}@media(max-width:1000px){.stack-grid,.authoring{grid-template-columns:1fr}}@media(max-width:650px){.stats,.template-grid{grid-template-columns:1fr 1fr}.service{align-items:flex-start;display:grid}.diagnostic{grid-template-columns:1fr}.diagnostic small{grid-column:1}}@media(max-width:420px){.stats,.template-grid{grid-template-columns:1fr}}</style></body></html>