@stacksjs/ts-cloud 0.2.20 → 0.2.21

package/dist/drivers/hetzner/client.d.ts

@@ -91,10 +91,12 @@ export interface CreateSshKeyOptions {
     publicKey: string;
     labels?: Record<string, string>;
 }
+/** Minimal fetch signature the client relies on (always called with a string URL). */
+export type HetznerFetch = (url: string, init?: RequestInit) => Promise<Response>;
 export interface HetznerClientOptions {
     apiToken: string;
     baseUrl?: string;
-    fetchImpl?: typeof fetch;
+    fetchImpl?: HetznerFetch;
 }
 export declare class HetznerClient {
     readonly name = "hetzner";

package/dist/drivers/hetzner/cloud-init.d.ts

@@ -13,5 +13,12 @@ export interface UbuntuBootstrapOptions {
 export declare function generateUbuntuAppCloudInit(options?: UbuntuBootstrapOptions): string;
 /**
  * Wrap a bash bootstrap script as Hetzner cloud-init user_data (#cloud-config).
+ *
+ * The script is written to disk via `write_files` and then executed through an
+ * explicit `bash` invocation in `runcmd`. cloud-init runs bare `runcmd` entries
+ * with `/bin/sh` (dash on Ubuntu), which chokes on bash-only syntax like
+ * `set -o pipefail` and aborts the whole bootstrap — so embedding the script
+ * inline under `runcmd:` silently breaks bun/caddy installation. Writing the
+ * file (shebang preserved) and running `bash <file>` guarantees a bash shell.
  */
 export declare function wrapCloudInitUserData(bootstrapScript: string): string;

package/dist/drivers/shared/deploy-script.d.ts

@@ -15,6 +15,13 @@ export interface BuildSiteDeployScriptOptions {
     execStart: string;
     envEntries: Record<string, string>;
     port?: number;
+    /**
+     * Commands run inside `appDir` after extraction + `.env` write, before the
+     * systemd unit is (re)written and started. Typically dependency install
+     * and/or build steps (e.g. `bun install --frozen-lockfile`, `bun run build`)
+     * so the release tarball can omit `node_modules`.
+     */
+    preStartCommands?: string[];
 }
 /**
  * Build the remote shell commands that install/refresh a site on a compute target.

package/dist/index.js

@@ -81435,12 +81435,19 @@ echo "ts-cloud bootstrap complete — instance is ready for site deploys"
   return script;
 }
 function wrapCloudInitUserData(bootstrapScript) {
+  const scriptPath = "/var/lib/cloud/ts-cloud-bootstrap.sh";
+  const indented = bootstrapScript.split(`
+`).map((line) => `      ${line}`).join(`
+`);
   return `#cloud-config
+write_files:
+  - path: ${scriptPath}
+    permissions: '0755'
+    owner: root:root
+    content: |
+${indented}
 runcmd:
-  - |
-    ${bootstrapScript.split(`
-`).join(`
-    `)}
+  - [ bash, ${scriptPath} ]
 `;
 }
 
@@ -81464,10 +81471,10 @@ function buildHetznerFirewallRules(config6) {
 // src/drivers/hetzner/instance-sizes.ts
 var HETZNER_INSTANCE_TYPES = {
   micro: "cpx11",
-  small: "cx22",
-  medium: "cx32",
-  large: "cx42",
-  xlarge: "cx52",
+  small: "cx23",
+  medium: "cx33",
+  large: "cx43",
+  xlarge: "cx53",
   "2xlarge": "ccx33"
 };
 function resolveHetznerServerType(size) {
@@ -81516,6 +81523,7 @@ async function writeDriverState(stackName, state) {
 }
 
 // src/drivers/hetzner/driver.ts
+var SSH_MAX_BUFFER = 1024 * 1024 * 256;
 function expandHome(path) {
   return path.startsWith("~/") ? join13(homedir7(), path.slice(2)) : path;
 }
@@ -81736,13 +81744,14 @@ class HetznerDriver {
       "BatchMode=yes",
       localPath,
       `${this.sshUser}@${host}:${remotePath}`
-    ].map((arg) => `"${arg.replace(/"/g, "\\\"")}"`).join(" "), { stdio: "pipe" });
+    ].map((arg) => `"${arg.replace(/"/g, "\\\"")}"`).join(" "), { stdio: "pipe", maxBuffer: SSH_MAX_BUFFER });
   }
   sshExec(host, script) {
     const escaped = script.replace(/'/g, `'\\''`);
     return execSync(`ssh ${this.sshBaseArgs(host).map((a) => `"${a.replace(/"/g, "\\\"")}"`).join(" ")} '${escaped}'`, {
       encoding: "utf8",
-      stdio: ["pipe", "pipe", "pipe"]
+      stdio: ["pipe", "pipe", "pipe"],
+      maxBuffer: SSH_MAX_BUFFER
     });
   }
 }
@@ -81792,12 +81801,14 @@ function buildSiteDeployScript(options) {
     artifactFetch,
     execStart,
     envEntries,
-    port
+    port,
+    preStartCommands = []
   } = options;
   const appDir = options.appDir ?? `/var/www/${siteName}`;
   const serviceName = `${slug}-${siteName}.service`;
   const envFile = Object.entries(envEntries).map(([k, v]) => `${k}=${JSON.stringify(String(v))}`).join(`
 `);
+  const preStart = preStartCommands.length > 0 ? [`cd ${appDir}`, ...preStartCommands] : [];
   return [
     "set -euo pipefail",
     ...artifactFetch,
@@ -81808,6 +81819,7 @@ function buildSiteDeployScript(options) {
     envFile,
     "TS_CLOUD_ENV_EOF",
     `chmod 600 ${appDir}/.env`,
+    ...preStart,
     `cat > /etc/systemd/system/${serviceName} <<'TS_CLOUD_UNIT_EOF'`,
     "[Unit]",
     `Description=${siteName} (managed by ts-cloud)`,
@@ -81886,7 +81898,8 @@ async function deploySiteRelease(driver, options, logger4 = noopLogger) {
     artifactFetch,
     execStart: resolveExecStart(site.start, runtime),
     envEntries: site.env || {},
-    port: site.port
+    port: site.port,
+    preStartCommands: site.preStart
   });
   logger4.step(`Deploying to ${targets.length} target(s)...`);
   const result = await driver.runRemoteDeploy({

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/ts-cloud",
   "type": "module",
-  "version": "0.2.20",
+  "version": "0.2.21",
   "description": "A lightweight, performant infrastructure-as-code library and CLI for deploying both server-based (EC2) and serverless applications.",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -89,8 +89,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.2.20",
-    "@ts-cloud/core": "0.2.20",
+    "@ts-cloud/aws-types": "0.2.21",
+    "@ts-cloud/core": "0.2.21",
     "@stacksjs/ts-xml": "^0.1.0"
   },
   "devDependencies": {