@stacksjs/ts-cloud 0.7.113 → 0.7.115

package/dist/{chunk-6xnwshtc.js → chunk-ck9gzxr0.js}

@@ -20,6 +20,7 @@ import {
   isManagementDashboardSiteName,
   resolveAppDatabase,
   resolveCloudProvider,
+  resolveDeploymentMode,
   resolveManagementDashboardSites,
   resolveProjectStackName,
   resolveStatePath,
@@ -1479,6 +1480,18 @@ function shipsARelease(site) {
   const kind = resolveSiteKind(site);
   return kind !== "bucket" && kind !== "redirect" && kind !== "proxy";
 }
+function deployShipsFiles(config, onlySite) {
+  if (resolveDeploymentMode(config) === "serverless")
+    return true;
+  const entries = Object.entries(config.sites ?? {}).filter(([, site]) => site != null);
+  const inScope = onlySite ? entries.filter(([name]) => name === onlySite) : entries;
+  if (inScope.length === 0)
+    return true;
+  return !inScope.every(([, site]) => {
+    const kind = resolveSiteKind(site);
+    return kind === "redirect" || kind === "proxy";
+  });
+}
 
 // src/drivers/shared/rpx-gateway.ts
 var DEFAULT_RPX_CERTS_DIR = "/etc/rpx/certs";
@@ -6749,7 +6762,7 @@ async function deployAllComputeSites(options) {
     return true;
   });
   if (deployable.length === 0)
-    return true;
+    return reloadRpxGateway(options);
   if (!await ensureAttachModeDatabase(driver, options, logger))
     return false;
   const tarballFor = (siteName) => dashboardTarballBySite.get(siteName) ?? tarballForSite(siteName);
@@ -7010,4 +7023,4 @@ function buildCloudFrontOriginConfig(options) {
     CustomErrorResponses: { Quantity: 0 }
   };
 }
-export { collectServerDnsDomains, removeStaleServerAddressRecords, normalizePublicIpv6, IPV6_EXCLUDED_HOST_LABELS, hostAcceptsIpv6, reconcileAddressRecords, verifyAddressRecord, PANTRY_PROJECT_DIR, buildPantryBootstrapScript, buildVitessProvisionScript, pgAdminCommand, BACKUP_RUNNER_PATH, buildBackupRestoreScript, siteInstallBase, isPhpSite, resolveProxyUpstreams, hasProxyUpstream, resolveSiteDeployTarget, resolveSiteKind, validateDeploymentConfig, shipsARelease, DEFAULT_RPX_CERTS_DIR, normalizeRoutePath, deriveRouteId, buildRpxConfig, buildRpxLbConfig, renderRpxLauncher, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, buildRpxProvisionScript, buildRpxFragmentRefreshScript, buildUbuntuBootstrapScript, AwsDriver, resolveHetznerLocation, HetznerClient, resolveHetznerApiToken2 as resolveHetznerApiToken, normalizeSshPublicKey, wrapCloudInitUserData, HetznerDriver, LocalBoxDriver, isBoxMode, createCloudDriver, CloudDriverFactory, cloudDrivers, planHetznerServerResize, isHetznerCapacityError, executeHetznerServerResize, buildSshArgs, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, collectHetznerResizeManifest, prepareHetznerResize, verifyHetznerResize, resolveHetznerHostOptimizationPlan, buildHetznerHostOptimizationScript, applyHetznerHostOptimization, collectHetznerHostOptimizationReport, verifyHetznerHostOptimization, resizeCheckpointPath, resizeLockPath, readResizeCheckpoint, writeResizeCheckpoint, acquireResizeLock, ensureSshKey, ensureFirewall, ensureServer, serverPublicIpv4, UBUNTU_2404_AMI_PARAM, buildBoxUserData, HetznerBoxProvisioner, AwsBoxProvisioner, createBoxProvisioner, releasePaths, buildRollbackScript, resolveExecStart, buildSiteDeployScript, buildStaticSiteDeployScript, releaseTarballTmpPath, buildAwsArtifactFetch, buildLocalArtifactFetch, buildHostCleanupScript, MANAGEMENT_DASHBOARD_SITE, dashboardCredentialsFile, resolveDashboardAuth, resolveUiSource, ensureManagementDashboard, buildManagementDashboardArtifact, resolveSiteFramework, deploySiteRelease, deployAllComputeSites, reloadRpxGateway, renewRpxCertificates, MANAGED_CACHE_POLICY_OPTIMIZED, MANAGED_CACHE_POLICY_DISABLED, MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER, buildCloudFrontOriginConfig };
+export { collectServerDnsDomains, removeStaleServerAddressRecords, normalizePublicIpv6, IPV6_EXCLUDED_HOST_LABELS, hostAcceptsIpv6, reconcileAddressRecords, verifyAddressRecord, PANTRY_PROJECT_DIR, buildPantryBootstrapScript, buildVitessProvisionScript, pgAdminCommand, BACKUP_RUNNER_PATH, buildBackupRestoreScript, siteInstallBase, isPhpSite, resolveProxyUpstreams, hasProxyUpstream, resolveSiteDeployTarget, resolveSiteKind, validateDeploymentConfig, shipsARelease, deployShipsFiles, DEFAULT_RPX_CERTS_DIR, normalizeRoutePath, deriveRouteId, buildRpxConfig, buildRpxLbConfig, renderRpxLauncher, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, buildRpxProvisionScript, buildRpxFragmentRefreshScript, buildUbuntuBootstrapScript, AwsDriver, resolveHetznerLocation, HetznerClient, resolveHetznerApiToken2 as resolveHetznerApiToken, normalizeSshPublicKey, wrapCloudInitUserData, HetznerDriver, LocalBoxDriver, isBoxMode, createCloudDriver, CloudDriverFactory, cloudDrivers, planHetznerServerResize, isHetznerCapacityError, executeHetznerServerResize, buildSshArgs, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, collectHetznerResizeManifest, prepareHetznerResize, verifyHetznerResize, resolveHetznerHostOptimizationPlan, buildHetznerHostOptimizationScript, applyHetznerHostOptimization, collectHetznerHostOptimizationReport, verifyHetznerHostOptimization, resizeCheckpointPath, resizeLockPath, readResizeCheckpoint, writeResizeCheckpoint, acquireResizeLock, ensureSshKey, ensureFirewall, ensureServer, serverPublicIpv4, UBUNTU_2404_AMI_PARAM, buildBoxUserData, HetznerBoxProvisioner, AwsBoxProvisioner, createBoxProvisioner, releasePaths, buildRollbackScript, resolveExecStart, buildSiteDeployScript, buildStaticSiteDeployScript, releaseTarballTmpPath, buildAwsArtifactFetch, buildLocalArtifactFetch, buildHostCleanupScript, MANAGEMENT_DASHBOARD_SITE, dashboardCredentialsFile, resolveDashboardAuth, resolveUiSource, ensureManagementDashboard, buildManagementDashboardArtifact, resolveSiteFramework, deploySiteRelease, deployAllComputeSites, reloadRpxGateway, renewRpxCertificates, MANAGED_CACHE_POLICY_OPTIMIZED, MANAGED_CACHE_POLICY_DISABLED, MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER, buildCloudFrontOriginConfig };

package/dist/{chunk-ham2enem.js → chunk-f52r4fsk.js}

@@ -50,7 +50,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-6xnwshtc.js";
+} from "./chunk-ck9gzxr0.js";
 import {
   SSMClient
 } from "./chunk-7m60qnc8.js";

package/dist/deploy/index.js

@@ -36,7 +36,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-ham2enem.js";
+} from "../chunk-f52r4fsk.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -64,6 +64,7 @@ import {
   buildManagementDashboardArtifact,
   collectServerDnsDomains,
   dashboardCredentialsFile,
+  deployShipsFiles,
   ensureManagementDashboard,
   hasProxyUpstream,
   hostAcceptsIpv6,
@@ -80,7 +81,7 @@ import {
   siteInstallBase,
   validateDeploymentConfig,
   verifyAddressRecord
-} from "../chunk-6xnwshtc.js";
+} from "../chunk-ck9gzxr0.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";
 import"../chunk-rds0sy87.js";
@@ -139,6 +140,7 @@ export {
   deployStaticSite,
   deployStaticApiOrigin,
   deploySite,
+  deployShipsFiles,
   deployServerlessApp,
   deployExistingStaticFullStack,
   deleteStaticSite,

package/dist/deploy/site-target.d.ts

@@ -97,3 +97,19 @@ export declare function validateDeploymentConfig(config: CloudConfig): Deploymen
  * regenerated from the full `sites` model, not from this list.
  */
 export declare function shipsARelease(site: SiteConfig): boolean;
+/**
+ * Does this deploy put any file from the working tree onto a server or into a
+ * bucket?
+ *
+ * `false` only when every site in scope is a pure route — a `redirect` the
+ * gateway answers, or a `proxyTo` it forwards to something ts-cloud does not
+ * manage. Those ship no `root`, write no release `.env`, and run no `preStart`,
+ * so nothing in this directory can reach a box through them, and the
+ * pre-deployment secret scan has no artifact to look at.
+ *
+ * Deliberately conservative. A `bucket` site uploads its built `root`, so it
+ * counts as shipping even though {@link shipsARelease} is false for it, and a
+ * serverless project packages a Lambda artifact regardless of `sites`. Both
+ * keep the full scan.
+ */
+export declare function deployShipsFiles(config: CloudConfig, onlySite?: string): boolean;

package/dist/drivers/index.js

@@ -68,7 +68,7 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-6xnwshtc.js";
+} from "../chunk-ck9gzxr0.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";
 import"../chunk-rds0sy87.js";

package/dist/index.js

@@ -208,7 +208,7 @@ import {
   verifyUpdateSignature,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-ham2enem.js";
+} from "./chunk-f52r4fsk.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -341,7 +341,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-6xnwshtc.js";
+} from "./chunk-ck9gzxr0.js";
 import {
   EC2Client,
   SSMClient