@stacksjs/ts-cloud 0.7.110 → 0.7.111

package/dist/bin/dashboard-server.js

@@ -5714,11 +5714,11 @@ ${JSON.stringify(T)}`).digest("hex")}class Oh{controlPlane;identities;queue;spen
 host:${R}
 `,"content-type;host","UNSIGNED-PAYLOAD"].join(`
 `),X=["AWS4-HMAC-SHA256",A,h,OE.createHash("sha256").update(I).digest("hex")].join(`
-`),J=OE.createHmac("sha256",`AWS4${N}`).update(S).digest(),z=OE.createHmac("sha256",J).update(this.region).digest(),f=OE.createHmac("sha256",z).update("s3").digest(),W=OE.createHmac("sha256",f).update("aws4_request").digest(),Q=OE.createHmac("sha256",W).update(X).digest("hex");return U.append("X-Amz-Signature",Q),`${this.endpointProtocol}://${R}${this.objectPath(E,r)}?${U.toString()}`}async createMultipartUpload(E,_,T){let t={};if(T?.contentType)t["Content-Type"]=T.contentType;if(T?.metadata)for(let[R,L]of Object.entries(T.metadata))t[`x-amz-meta-${R}`]=L;let d=_.split("/").map((R)=>encodeURIComponent(R)).join("/");return{UploadId:(await this.client.request({service:"s3",region:this.region,method:"POST",path:`/${d}`,bucket:E,queryParams:{uploads:""},headers:t}))?.InitiateMultipartUploadResult?.UploadId}}async uploadPart(E,_,T,t,d){let{accessKeyId:N,secretAccessKey:R,sessionToken:L}=this.getCredentials(),A=this.s3VirtualHost(E),S=_.split("/").map((BE)=>encodeURIComponent(BE)).join("/"),h=this.objectPath(E,S),O=`${this.objectUrl(E,S)}?partNumber=${t}&uploadId=${encodeURIComponent(T)}`,r=new Date,U=r.toISOString().replace(/[:-]|\.\d{3}/g,""),I=r.toISOString().slice(0,10).replace(/-/g,""),X=OE.createHash("sha256").update(d).digest("hex"),J={host:A,"x-amz-date":U,"x-amz-content-sha256":X};if(L)J["x-amz-security-token"]=L;let z=Object.keys(J).sort().map((BE)=>`${BE.toLowerCase()}:${J[BE].trim()}
+`),J=OE.createHmac("sha256",`AWS4${N}`).update(S).digest(),z=OE.createHmac("sha256",J).update(this.region).digest(),f=OE.createHmac("sha256",z).update("s3").digest(),W=OE.createHmac("sha256",f).update("aws4_request").digest(),Q=OE.createHmac("sha256",W).update(X).digest("hex");return U.append("X-Amz-Signature",Q),`${this.endpointProtocol}://${R}${this.objectPath(E,r)}?${U.toString()}`}async createMultipartUpload(E,_,T){let t={};if(T?.contentType)t["Content-Type"]=T.contentType;if(T?.metadata)for(let[L,A]of Object.entries(T.metadata))t[`x-amz-meta-${L}`]=A;let d=_.split("/").map((L)=>encodeURIComponent(L)).join("/"),N=await this.client.request({service:"s3",region:this.region,method:"POST",path:`/${d}`,bucket:E,queryParams:{uploads:""},headers:t});return{UploadId:(N?.InitiateMultipartUploadResult??N)?.UploadId}}async uploadPart(E,_,T,t,d){let{accessKeyId:N,secretAccessKey:R,sessionToken:L}=this.getCredentials(),A=this.s3VirtualHost(E),S=_.split("/").map((BE)=>encodeURIComponent(BE)).join("/"),h=this.objectPath(E,S),O=`${this.objectUrl(E,S)}?partNumber=${t}&uploadId=${encodeURIComponent(T)}`,r=new Date,U=r.toISOString().replace(/[:-]|\.\d{3}/g,""),I=r.toISOString().slice(0,10).replace(/-/g,""),X=OE.createHash("sha256").update(d).digest("hex"),J={host:A,"x-amz-date":U,"x-amz-content-sha256":X};if(L)J["x-amz-security-token"]=L;let z=Object.keys(J).sort().map((BE)=>`${BE.toLowerCase()}:${J[BE].trim()}
 `).join(""),f=Object.keys(J).sort().map((BE)=>BE.toLowerCase()).join(";"),W=["PUT",h,`partNumber=${t}&uploadId=${encodeURIComponent(T)}`,z,f,X].join(`
 `),Q="AWS4-HMAC-SHA256",G=`${I}/${this.region}/s3/aws4_request`,V=[Q,U,G,OE.createHash("sha256").update(W).digest("hex")].join(`
 `),M=OE.createHmac("sha256",`AWS4${R}`).update(I).digest(),i=OE.createHmac("sha256",M).update(this.region).digest(),K=OE.createHmac("sha256",i).update("s3").digest(),b=OE.createHmac("sha256",K).update("aws4_request").digest(),o=OE.createHmac("sha256",b).update(V).digest("hex"),NE=`${Q} Credential=${N}/${G}, SignedHeaders=${f}, Signature=${o}`,hE=await fetch(O,{method:"PUT",headers:{...J,Authorization:NE},body:We(d)});if(!hE.ok){let BE=await hE.text();throw Error(`Upload part failed: ${hE.status} ${BE}`)}return{ETag:hE.headers.get("etag")||""}}async completeMultipartUpload(E,_,T,t){let d=_.split("/").map((L)=>encodeURIComponent(L)).join("/"),R=`<?xml version="1.0" encoding="UTF-8"?>
-<CompleteMultipartUpload>${t.sort((L,A)=>L.PartNumber-A.PartNumber).map((L)=>`<Part><PartNumber>${L.PartNumber}</PartNumber><ETag>${L.ETag}</ETag></Part>`).join("")}</CompleteMultipartUpload>`;await this.client.request({service:"s3",region:this.region,method:"POST",path:`/${d}`,bucket:E,queryParams:{uploadId:T},headers:{"Content-Type":"application/xml"},body:R})}async abortMultipartUpload(E,_,T){let t=_.split("/").map((d)=>encodeURIComponent(d)).join("/");await this.client.request({service:"s3",region:this.region,method:"DELETE",path:`/${t}`,bucket:E,queryParams:{uploadId:T}})}async listMultipartUploads(E){let T=(await this.client.request({service:"s3",region:this.region,method:"GET",path:"/",bucket:E,queryParams:{uploads:""}}))?.ListMultipartUploadsResult?.Upload;if(!T)return[];return(Array.isArray(T)?T:[T]).map((d)=>({Key:d.Key,UploadId:d.UploadId,Initiated:d.Initiated}))}async restoreObject(E,_,T,t="Standard"){let d=`<?xml version="1.0" encoding="UTF-8"?>
+<CompleteMultipartUpload>${t.sort((L,A)=>L.PartNumber-A.PartNumber).map((L)=>`<Part><PartNumber>${L.PartNumber}</PartNumber><ETag>${L.ETag}</ETag></Part>`).join("")}</CompleteMultipartUpload>`;await this.client.request({service:"s3",region:this.region,method:"POST",path:`/${d}`,bucket:E,queryParams:{uploadId:T},headers:{"Content-Type":"application/xml"},body:R})}async abortMultipartUpload(E,_,T){let t=_.split("/").map((d)=>encodeURIComponent(d)).join("/");await this.client.request({service:"s3",region:this.region,method:"DELETE",path:`/${t}`,bucket:E,queryParams:{uploadId:T}})}async listMultipartUploads(E){let _=await this.client.request({service:"s3",region:this.region,method:"GET",path:"/",bucket:E,queryParams:{uploads:""}}),T=(_?.ListMultipartUploadsResult??_)?.Upload;if(!T)return[];return(Array.isArray(T)?T:[T]).map((d)=>({Key:d.Key,UploadId:d.UploadId,Initiated:d.Initiated}))}async restoreObject(E,_,T,t="Standard"){let d=`<?xml version="1.0" encoding="UTF-8"?>
 <RestoreRequest>
   <Days>${T}</Days>
   <GlacierJobParameters>
@@ -6170,7 +6170,7 @@ writeFileSync(candidatePath, JSON.stringify(candidate, null, 2) + '\\n', { mode:
 `.trim();return[`__tsc_fragment_candidate="$(mktemp "${E}.candidate.XXXXXX")"`,`cat > "$__tsc_fragment_candidate" <<'${T}'`,_,T,'chmod 0600 "$__tsc_fragment_candidate"',`if [ -f ${E} ]; then TS_CLOUD_RPX_CURRENT_FRAGMENT=${E} TS_CLOUD_RPX_CANDIDATE_FRAGMENT="$__tsc_fragment_candidate" ${t.bunBin} -e ${S9(d)}; fi`,`mv -f "$__tsc_fragment_candidate" ${E}`,`chmod 0600 ${E}`]}function xB(E){return`rpx-cert-renew-${(E||"app").replace(/[^a-z0-9._-]+/gi,"-")}.service`}function A9(E){let _=new Set;for(let T of E.proxies){let t=T.to;if(!t||t.startsWith("*")||t.includes(":")||!t.includes("."))continue;_.add(t)}return[..._]}function h9(E){let{config:_,proxy:T}=E,t=_.acmeChallengeWebroot,d=A9(_);if(!T.onDemandTls||!t||d.length===0)return[];let N=E.bunBin??"/usr/local/bin/bun",R=T.version??"latest",L=_.productionCerts.certsDir,A=T.onDemandTlsEmail??`webmaster@${d[0]}`,S=`${N} ${RT}/node_modules/@stacksjs/tlsx/dist/bin/cli.js`,h=d.join(","),O=d.join(" "),r=(E.slug||"app").replace(/[^a-z0-9._-]+/gi,"-"),U=`${cS}/renew-certs-${r}.sh`,I=xB(r),X=`rpx-cert-renew-${r}.timer`,J=["#!/bin/sh","# Generated by ts-cloud — issue/renew rpx gateway TLS certs via tlsx http-01.","# The running gateway serves the challenge from $WEBROOT on :80, so this needs","# no downtime and no DNS credentials. Reloads the gateway only if a cert changed.","set -u",`CERTS='${L}'`,`WEBROOT='${t}'`,`EMAIL='${A}'`,`TLSX="${S}"`,`DOMAINS='${h}'`,'before=$(cat "$CERTS"/*.crt 2>/dev/null | sha256sum)',`for d in ${O}; do`,'  if [ ! -s "$CERTS/$d.crt" ]; then','    $TLSX acme:issue -d "$d" --method http-01 --webroot "$WEBROOT" --dir "$CERTS" --prod --email "$EMAIL" || echo "issue $d failed (non-fatal)"',"    # rpx reloads its SNI set when a PEM appears. Complete that reload","    # before the next hostname starts http-01, or :80 can disappear in","    # the middle of the following challenge on a multi-domain deploy.",`    [ -s "$CERTS/$d.crt" ] && systemctl restart ${Id}`,"  fi","done",'$TLSX acme:renew --domains "$DOMAINS" --method http-01 --webroot "$WEBROOT" --dir "$CERTS" --days 30 --prod --email "$EMAIL" || echo "renew: some domains failed (non-fatal)"','rm -f "$CERTS"/*.chain.crt','after=$(cat "$CERTS"/*.crt 2>/dev/null | sha256sum)',`[ "$before" = "$after" ] || systemctl restart ${Id}`].join(`
 `),z=["[Unit]",`Description=Issue/renew rpx gateway TLS certs for ${r} (tlsx http-01)`,`After=network-online.target ${Id}`,"Wants=network-online.target","","[Service]","Type=oneshot",`ExecStart=${U}`].join(`
 `),f=["[Unit]",`Description=Daily rpx gateway TLS cert issuance/renewal for ${r}`,"","[Timer]","OnCalendar=*-*-* 03:30:00","RandomizedDelaySec=1h","Persistent=true","","[Install]","WantedBy=timers.target"].join(`
-`);return[`mkdir -p ${t}`,`(cd ${RT} && ${N} add @stacksjs/tlsx@${R}) || true`,...gR(U,J,"TS_CLOUD_RENEW_EOF"),`chmod +x ${U}`,...gR(`/etc/systemd/system/${I}`,z,"TS_CLOUD_RENEW_SVC_EOF"),...gR(`/etc/systemd/system/${X}`,f,"TS_CLOUD_RENEW_TIMER_EOF"),"systemctl daemon-reload",`systemctl enable --now ${X} || true`,`${U} || true`]}function rN(E){let{config:_,proxy:T}=E,t=E.bunBin??"/usr/local/bin/bun",d=T.version??"latest",N=_.productionCerts.certsDir,R=(E.slug||"app").replace(/[^a-z0-9._-]+/gi,"-"),L=JSON.stringify({slug:R,..._},null,2),A=L9(ON,N),h=[`Environment=RPX_UPSTREAM_TIMEOUT=${T.upstreamTimeout??60}`];if(typeof T.maxUpstreamConns==="number")h.push(`Environment=RPX_MAX_UPSTREAM_CONNS=${T.maxUpstreamConns}`);let O=T.memoryHigh??"512M",r=T.memoryMax??"768M";return["set -euo pipefail",`mkdir -p ${cS} ${ON} ${N} ${RT}`,`rm -rf ${RT}.next ${RT}.prev`,`mkdir -p ${RT}.next`,`(cd ${RT}.next && ${t} add @stacksjs/rpx@${d})`,`mv ${RT} ${RT}.prev`,`mv ${RT}.next ${RT}`,`rm -rf ${RT}.prev`,`ln -sfn ${RT}/node_modules ${cS}/node_modules`,...kB(`${ON}/${R}.json`,L,"TS_CLOUD_RPX_FRAGMENT_EOF",{bunBin:t,preserveManagementDashboardRoutes:E.preserveManagementDashboardRoutes}),...gR(eI,A,"TS_CLOUD_RPX_EOF"),`${t} build --production --compile --outfile ${$S}.next ${eI}`,`chmod 0755 ${$S}.next`,`mv -f ${$S}.next ${$S}`,...gR(`/etc/systemd/system/${Id}`,["[Unit]","Description=rpx reverse-proxy gateway (managed by ts-cloud)","After=network.target network-online.target","Wants=network-online.target","","[Service]","Type=simple",`ExecStart=${$S}`,`WorkingDirectory=${RT}`,"Environment=BUN_INSTALL=/root/.bun","Environment=APP_ENV=production","Environment=NODE_ENV=production",...h,"MemoryAccounting=true",`MemoryHigh=${O}`,`MemoryMax=${r}`,"OOMPolicy=stop","Restart=always","RestartSec=5","LimitNOFILE=1048576","AmbientCapabilities=CAP_NET_BIND_SERVICE","","[Install]","WantedBy=multi-user.target"].join(`
+`);return[`mkdir -p ${t}`,`(cd ${RT} && ${N} add @stacksjs/tlsx@${R}) || true`,...gR(U,J,"TS_CLOUD_RENEW_EOF"),`chmod +x ${U}`,...gR(`/etc/systemd/system/${I}`,z,"TS_CLOUD_RENEW_SVC_EOF"),...gR(`/etc/systemd/system/${X}`,f,"TS_CLOUD_RENEW_TIMER_EOF"),"systemctl daemon-reload",`systemctl enable --now ${X} || true`,`${U} || true`]}function rN(E){let{config:_,proxy:T}=E,t=E.bunBin??"/usr/local/bin/bun",d=T.version??"latest",N=_.productionCerts.certsDir,R=(E.slug||"app").replace(/[^a-z0-9._-]+/gi,"-"),L=JSON.stringify({slug:R,..._},null,2),A=L9(ON,N),h=[`Environment=RPX_UPSTREAM_TIMEOUT=${T.upstreamTimeout??60}`];if(typeof T.maxUpstreamConns==="number")h.push(`Environment=RPX_MAX_UPSTREAM_CONNS=${T.maxUpstreamConns}`);let O=T.memoryHigh??"512M",r=T.memoryMax??"768M";return["set -euo pipefail",`mkdir -p ${cS} ${ON} ${N} ${RT}`,`rm -rf ${RT}.next ${RT}.prev`,`mkdir -p ${RT}.next`,`(cd ${RT}.next && ${t} add @stacksjs/rpx@${d})`,`mv ${RT} ${RT}.prev`,`mv ${RT}.next ${RT}`,`rm -rf ${RT}.prev`,`ln -sfn ${RT}/node_modules ${cS}/node_modules`,...kB(`${ON}/${R}.json`,L,"TS_CLOUD_RPX_FRAGMENT_EOF",{bunBin:t,preserveManagementDashboardRoutes:E.preserveManagementDashboardRoutes}),...gR(eI,A,"TS_CLOUD_RPX_EOF"),`${t} build --production --compile --outfile ${$S}.next ${eI}`,`chmod 0755 ${$S}.next`,`mv -f ${$S}.next ${$S}`,...gR(`/etc/systemd/system/${Id}`,["[Unit]","Description=rpx reverse-proxy gateway (managed by ts-cloud)","After=network.target network-online.target","Wants=network-online.target","","[Service]","Type=simple",`ExecStart=${$S}`,`WorkingDirectory=${RT}`,"Environment=BUN_INSTALL=/root/.bun","Environment=APP_ENV=production","Environment=NODE_ENV=production",...h,"MemoryAccounting=true",`MemoryHigh=${O}`,`MemoryMax=${r}`,"OOMPolicy=stop","Restart=always","RestartSec=5","StartLimitIntervalSec=120","StartLimitBurst=5",`ExecStartPre=/bin/sh -c 'for p in 80 443; do fuser -k -n tcp "$p" 2>/dev/null || true; done; sleep 1'`,"LimitNOFILE=1048576","AmbientCapabilities=CAP_NET_BIND_SERVICE","","[Install]","WantedBy=multi-user.target"].join(`
 `),"TS_CLOUD_RPX_UNIT_EOF"),"systemctl daemon-reload","systemctl disable --now bun-gateway.service 2>/dev/null || true","systemctl disable --now bun-gateway-renew.timer bun-gateway-renew.service 2>/dev/null || true","rm -f /etc/systemd/system/bun-gateway-renew.timer /etc/systemd/system/bun-gateway-renew.service","systemctl disable --now ts-cloud-nginx.service 2>/dev/null || true",`for timer in /etc/systemd/system/rpx-cert-renew-*.timer; do [ -e "$timer" ] || continue; unit="$(basename "$timer")"; tenant="\${unit#rpx-cert-renew-}"; tenant="\${tenant%.timer}"; [ -f "${ON}/$tenant.json" ] && continue; systemctl disable --now "$unit" 2>/dev/null || true; rm -f "$timer" "/etc/systemd/system/rpx-cert-renew-$tenant.service" "${cS}/renew-certs-$tenant.sh"; done`,`systemctl enable ${Id}`,`systemctl restart ${Id}`,...h9(E)]}function yO(E){let _=(E.slug||"app").replace(/[^a-z0-9._-]+/gi,"-"),T=JSON.stringify({slug:_,...E.config},null,2);return["set -euo pipefail",`mkdir -p ${ON}`,...kB(`${ON}/${_}.json`,T,"TS_CLOUD_RPX_FRAGMENT_EOF",{bunBin:"/usr/local/bin/bun",preserveManagementDashboardRoutes:E.preserveManagementDashboardRoutes}),`systemctl restart ${Id}`]}function kR(E=[],_={}){let T=_.path??"/root/.ssh/authorized_keys",d=[`mkdir -p ${T.replace(/\/[^/]*$/,"")}`,`touch ${T}`,`sed -i '/^${qB("# >>> ts-cloud managed keys >>>")}$/,/^${qB("# <<< ts-cloud managed keys <<<")}$/d' ${T}`];if(E.length>0){let N=["# >>> ts-cloud managed keys >>>",...E.map((R)=>`${R.publicKey.trim()} ${R.name}`),"# <<< ts-cloud managed keys <<<"].join(`
 `);d.push(`cat >> ${T} <<'TS_CLOUD_KEYS_EOF'`,N,"TS_CLOUD_KEYS_EOF",`chmod 600 ${T}`)}return d}function qB(E){return E.replace(/[.*[\]\\/^$]/g,"\\$&")}vL();WI();function uB(E,_){let T=`/tmp/ts-cloud-${E}.sh`,t=`TS_CLOUD_${E.toUpperCase().replace(/[^A-Z0-9]/g,"_")}_EOF`;return[`cat > ${T} <<'${t}'`,_.replace(/\n$/,""),t,`chmod +x ${T}`,`bash ${T} || echo "ts-cloud: ${E} setup did not complete; continuing" >&2`,`rm -f ${T}`]}function nB(E,_){if(E===!1)return;if(E===!0||E===void 0)return _;return E}var bB={enabled:!0,ports:[80,443]},r9={mode:"detection",paranoiaLevel:1};function U9(E=!0,_=[]){let T=nB(E,bB);if(!T||T.enabled===!1)return[];let t=[...new Set([...T.ports??bB.ports??[],..._])].sort((d,N)=>d-N);return uB("ddos",n0({...T,ports:t}))}function D9(E=!0){let _=nB(E,r9);if(!_||_.mode==="off")return[];return uB("waf",BI(_))}function lB(E={},_=[]){return[...U9(E.ddos,_),...D9(E.waf)]}var I9=[80,443];function zI(E={}){if(E.enabled===!1)return[];let _=[...new Set([...I9,...E.allowedPorts||[]])].filter((t)=>Number.isInteger(t)&&t>=1&&t<=65535).sort((t,d)=>t-d),T=["export DEBIAN_FRONTEND=noninteractive","command -v ufw >/dev/null 2>&1 || apt-get install -y ufw","ufw --force reset","ufw default deny incoming","ufw default allow outgoing","ufw allow OpenSSH"];for(let t of _)T.push(`ufw allow ${t}/tcp`);return T.push("ufw --force enable"),T}function eS(E){let _=E.infrastructure?.compute??{},T=_.runtime==="php"||!!_.php,t=T||!!_.managedServices,d=t?fR():[],N=!CN(_),R=T?[...d,...gO({versions:_.php?.versions,default:_.php?.default,extensions:_.php?.extensions,installNginx:N,optimizeForProduction:_.php?.optimizeForProduction,ini:_.php?.ini}),...N?ZB():[]]:void 0,L=[],A=__(E);if(!T&&t)L.push(...d);if(L.push(...ZR(E.notifications)),_.managedServices)L.push(...VO(_.managedServices),...IS(A,_.managedServices));if(L.push(...zI(_.firewall??(T?{enabled:!0}:{enabled:!1}))),L.push(...lB({ddos:_.ddos,waf:_.waf},_.firewall?.allowedPorts??[])),L.push(...AN(_.autoUpdates??T)),L.push(...hN(_.monitoring??T)),L.push(...kR(_.sshKeys)),_.backups?.enabled)L.push(...ZO({database:A,backups:_.backups}));return{runtime:_.runtime||"bun",runtimeVersion:_.runtimeVersion||"latest",phpBox:T,phpProvision:R,servicesProvision:L.length>0?L:void 0}}function qT(E={}){let{runtime:_="bun",runtimeVersion:T="latest",systemPackages:t=[],database:d,phpProvision:N,servicesProvision:R,caddyfile:L,rpxProvision:A,baked:S=!1,swapGb:h=2}=E,O=new Set(t);if(d==="sqlite")O.add("sqlite3");else if(d==="mysql")O.add("mysql-client");else if(d==="postgres")O.add("postgresql-client");let r=`#!/bin/bash
 set -euo pipefail

package/dist/{chunk-wmz8x3cy.js → chunk-3ee2jav4.js}

@@ -1,6 +1,6 @@
 import {
   deployStaticSiteWithExternalDnsFull
-} from "./chunk-8kh577qh.js";
+} from "./chunk-v0vpamnf.js";
 import {
   box,
   error,
@@ -22,10 +22,10 @@ import {
   SQSClient,
   STSClient,
   SecretsManagerClient
-} from "./chunk-x6yzgv7y.js";
+} from "./chunk-6a1t7fnq.js";
 import {
   IAMClient
-} from "./chunk-hpv68b4a.js";
+} from "./chunk-nsgqsmrh.js";
 import {
   CloudFrontClient
 } from "./chunk-01d86gt1.js";
@@ -50,7 +50,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-d3vx2ekv.js";
+} from "./chunk-wh1y5rtk.js";
 import {
   SSMClient
 } from "./chunk-7m60qnc8.js";
@@ -60,7 +60,7 @@ import {
 import {
   S3Client,
   resolveCredentials
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   AWSClient,
   buildQueryParams
@@ -10395,7 +10395,7 @@ async function sendAuthenticationEmail(config, message) {
   if (!from)
     return false;
   try {
-    const { EmailClient } = await import("./chunk-k114qwg9.js");
+    const { EmailClient } = await import("./chunk-ttz2ra5j.js");
     const email = new EmailClient({ region: config.project.region, defaultFrom: from });
     await email.send(message);
     return true;
@@ -36403,7 +36403,7 @@ async function startLocalDashboardServer(options = {}) {
     });
   const notificationRouter = new NotificationRouter(alertStore, {
     emailImpl: async (input) => {
-      const { email } = await import("./chunk-k114qwg9.js");
+      const { email } = await import("./chunk-ttz2ra5j.js");
       return email.send(input);
     }
   });

package/dist/{chunk-x6yzgv7y.js → chunk-6a1t7fnq.js}

@@ -1,10 +1,10 @@
 import {
   SESClient
-} from "./chunk-hpv68b4a.js";
+} from "./chunk-nsgqsmrh.js";
 import {
   S3Client,
   resolveCredentials
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   AWSClient
 } from "./chunk-zqtpg06c.js";

package/dist/{chunk-9v2pwxv9.js → chunk-kpeb5rcs.js}

@@ -5,12 +5,12 @@ import {
   generateStaticSiteTemplate,
   invalidateCache,
   uploadStaticFiles
-} from "./chunk-8kh577qh.js";
+} from "./chunk-v0vpamnf.js";
 import"./chunk-01d86gt1.js";
 import"./chunk-gttvakpv.js";
 import"./chunk-32e7ya18.js";
 import"./chunk-4cjrg98a.js";
-import"./chunk-wj3s95p9.js";
+import"./chunk-rds0sy87.js";
 import"./chunk-zqtpg06c.js";
 import"./chunk-v0bahtg2.js";
 export {

package/dist/{chunk-hpv68b4a.js → chunk-nsgqsmrh.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-32e7ya18.js";
 import {
   S3Client
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   AWSClient
 } from "./chunk-zqtpg06c.js";

package/dist/{chunk-wj3s95p9.js → chunk-rds0sy87.js}

@@ -1407,7 +1407,8 @@ host:${host}
       queryParams: { uploads: "" },
       headers
     });
-    return { UploadId: result?.InitiateMultipartUploadResult?.UploadId };
+    const root = result?.InitiateMultipartUploadResult ?? result;
+    return { UploadId: root?.UploadId };
   }
   async uploadPart(bucket, key, uploadId, partNumber, body) {
     const { accessKeyId, secretAccessKey, sessionToken } = this.getCredentials();
@@ -1504,7 +1505,7 @@ host:${host}
       bucket,
       queryParams: { uploads: "" }
     });
-    const uploads = result?.ListMultipartUploadsResult?.Upload;
+    const uploads = (result?.ListMultipartUploadsResult ?? result)?.Upload;
     if (!uploads)
       return [];
     const list = Array.isArray(uploads) ? uploads : [uploads];

package/dist/{chunk-k114qwg9.js → chunk-ttz2ra5j.js}

@@ -1,9 +1,9 @@
 import {
   EmailClient,
   email
-} from "./chunk-hpv68b4a.js";
+} from "./chunk-nsgqsmrh.js";
 import"./chunk-32e7ya18.js";
-import"./chunk-wj3s95p9.js";
+import"./chunk-rds0sy87.js";
 import"./chunk-zqtpg06c.js";
 import"./chunk-v0bahtg2.js";
 export {

package/dist/{chunk-8kh577qh.js → chunk-v0vpamnf.js}

@@ -16,7 +16,7 @@ import {
 } from "./chunk-4cjrg98a.js";
 import {
   S3Client
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   __require
 } from "./chunk-v0bahtg2.js";
@@ -815,7 +815,7 @@ async function deployStaticSiteWithExternalDnsFull(config) {
     }
   }
   onProgress?.("upload", "Uploading files to S3...");
-  const { uploadStaticFiles } = await import("./chunk-9v2pwxv9.js");
+  const { uploadStaticFiles } = await import("./chunk-kpeb5rcs.js");
   const uploadResult = await uploadStaticFiles({
     sourceDir,
     bucket: infraResult.bucket,
@@ -835,7 +835,7 @@ async function deployStaticSiteWithExternalDnsFull(config) {
   }
   if (infraResult.distributionId && uploadResult.uploaded > 0) {
     onProgress?.("invalidate", "Invalidating CloudFront cache...");
-    const { invalidateCache } = await import("./chunk-9v2pwxv9.js");
+    const { invalidateCache } = await import("./chunk-kpeb5rcs.js");
     await invalidateCache(infraResult.distributionId);
   }
   onProgress?.("complete", "Deployment complete!");

package/dist/{chunk-d3vx2ekv.js → chunk-wh1y5rtk.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-4cjrg98a.js";
 import {
   S3Client
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   renderWafInstallScript
 } from "./chunk-va2yd85b.js";
@@ -1287,7 +1287,7 @@ async function sendNotifications(config, event, message, options = {}) {
 }
 async function sendEmailNotification(email, event, message) {
   try {
-    const mod = await import("./chunk-k114qwg9.js");
+    const mod = await import("./chunk-ttz2ra5j.js");
     await mod.email.send({
       to: email.to,
       from: email.from,
@@ -1877,6 +1877,9 @@ function buildRpxProvisionScript(options) {
       "OOMPolicy=stop",
       "Restart=always",
       "RestartSec=5",
+      "StartLimitIntervalSec=120",
+      "StartLimitBurst=5",
+      `ExecStartPre=/bin/sh -c 'for p in 80 443; do fuser -k -n tcp "$p" 2>/dev/null || true; done; sleep 1'`,
       "LimitNOFILE=1048576",
       "AmbientCapabilities=CAP_NET_BIND_SERVICE",
       "",

package/dist/deploy/index.js

@@ -36,7 +36,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-wmz8x3cy.js";
+} from "../chunk-3ee2jav4.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -47,12 +47,12 @@ import {
   generateStaticSiteTemplate,
   invalidateCache,
   uploadStaticFiles
-} from "../chunk-8kh577qh.js";
+} from "../chunk-v0vpamnf.js";
 import {
   buildAndPushServerlessImage
 } from "../chunk-wmbep3b5.js";
-import"../chunk-x6yzgv7y.js";
-import"../chunk-hpv68b4a.js";
+import"../chunk-6a1t7fnq.js";
+import"../chunk-nsgqsmrh.js";
 import"../chunk-01d86gt1.js";
 import"../chunk-50jpda9q.js";
 import"../chunk-he9a874b.js";
@@ -78,10 +78,10 @@ import {
   siteInstallBase,
   validateDeploymentConfig,
   verifyAddressRecord
-} from "../chunk-d3vx2ekv.js";
+} from "../chunk-wh1y5rtk.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";
-import"../chunk-wj3s95p9.js";
+import"../chunk-rds0sy87.js";
 import"../chunk-zqtpg06c.js";
 import"../chunk-19bs955w.js";
 import"../chunk-va2yd85b.js";

package/dist/drivers/index.js

@@ -68,10 +68,10 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-d3vx2ekv.js";
+} from "../chunk-wh1y5rtk.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";
-import"../chunk-wj3s95p9.js";
+import"../chunk-rds0sy87.js";
 import"../chunk-zqtpg06c.js";
 import"../chunk-va2yd85b.js";
 import"../chunk-aa2dkn7b.js";

package/dist/index.js

@@ -208,7 +208,7 @@ import {
   verifyUpdateSignature,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-wmz8x3cy.js";
+} from "./chunk-3ee2jav4.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -219,7 +219,7 @@ import {
   generateStaticSiteTemplate,
   invalidateCache,
   uploadStaticFiles
-} from "./chunk-8kh577qh.js";
+} from "./chunk-v0vpamnf.js";
 import {
   buildAndPushServerlessImage
 } from "./chunk-wmbep3b5.js";
@@ -260,12 +260,12 @@ import {
   providerEndpoint,
   remapKey,
   resolveObjectStorage
-} from "./chunk-x6yzgv7y.js";
+} from "./chunk-6a1t7fnq.js";
 import {
   EmailClient,
   IAMClient,
   SESClient
-} from "./chunk-hpv68b4a.js";
+} from "./chunk-nsgqsmrh.js";
 import {
   CloudFrontClient
 } from "./chunk-01d86gt1.js";
@@ -338,7 +338,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-d3vx2ekv.js";
+} from "./chunk-wh1y5rtk.js";
 import {
   EC2Client,
   SSMClient
@@ -348,7 +348,7 @@ import {
 } from "./chunk-4cjrg98a.js";
 import {
   S3Client
-} from "./chunk-wj3s95p9.js";
+} from "./chunk-rds0sy87.js";
 import {
   AWSClient
 } from "./chunk-zqtpg06c.js";