@stacksjs/ts-cloud 0.7.20 → 0.7.22

package/dist/deploy/management-dashboard.d.ts

@@ -1,23 +1,34 @@
 /**
- * Auto-deploy of the ts-cloud management dashboard (the `@ts-cloud/ui` stx app)
- * on every server provision/deploy.
+ * Auto-deploy of the ts-cloud management dashboard on every server
+ * provision/deploy, so every box ships with a cockpit.
  *
- * Resolves the UI directory (the repo's local `packages/ui/`, else the prebuilt
- * UI that ships inside the installed package at `dist/ui`), derives a `dashboard.<apex>`
- * host, and injects it into `config.sites` as a server-static site. It is served
- * SECURE BY DEFAULT: the dashboard is served behind htpasswd on every deploy.
- * The password is resolved as: `TS_CLOUD_UI_PASSWORD` when set, else a strong
- * auto-generated one (persisted to `.ts-cloud/dashboard-credentials.json` so it
- * stays stable across deploys and printed once in the deploy log). Serving the
- * dashboard publicly is an explicit, deliberate opt-in via `TS_CLOUD_UI_PUBLIC`.
+ * **Live (the default).** The dashboard runs as a service on the box
+ * (`cloud dashboard:serve --box`) behind the proxy. It serves live data and the
+ * control API, and authenticates itself: a login page, sessions, and per-site
+ * collaborator grants. The release is tiny — the project's cloud config plus a
+ * `package.json` — and the box installs `@stacksjs/ts-cloud` from npm, which
+ * carries both the CLI and the UI it serves.
+ *
+ * On the first live deploy the box mints an admin and prints the password once
+ * into the deploy log. Users and the session key live in the site's shared
+ * `.ts-cloud/`, so they survive later deploys.
+ *
+ * **Static (`TS_CLOUD_UI_STATIC`).** The built UI shipped as files behind
+ * htpasswd. One shared password, all data baked in at build time, and therefore
+ * no collaborators. Kept for boxes that cannot run the service.
  *
  * Env:
+ * - `TS_CLOUD_UI_STATIC`    set truthy for the old static + htpasswd model
+ * - `TS_CLOUD_UI_DOMAIN`    explicit dashboard host (else `dashboard.<apex>`)
+ * - `TS_CLOUD_UI_PORT`      loopback port for the live service (default 7676)
+ * - `TS_CLOUD_UI_VERSION`   ts-cloud version the box installs (default: this one)
+ * - `TS_CLOUD_UI_DISABLE`   set truthy to skip auto-deploy
+ *
+ * Static mode only:
  * - `TS_CLOUD_UI_PASSWORD`  htpasswd password (unset ⇒ auto-generated + saved)
  * - `TS_CLOUD_UI_PUBLIC`    set truthy to serve WITHOUT auth (opt-out, insecure)
  * - `TS_CLOUD_UI_USERNAME`  htpasswd user (default `admin`)
- * - `TS_CLOUD_UI_DOMAIN`    explicit dashboard host (else `dashboard.<apex>`)
  * - `TS_CLOUD_UI_REALM`     browser auth realm
- * - `TS_CLOUD_UI_DISABLE`   set truthy to skip auto-deploy
  */
 import type { CloudConfig } from '@ts-cloud/core';
 /**
@@ -51,10 +62,29 @@ export interface EnsureDashboardLogger {
     info: (msg: string) => void;
     warn: (msg: string) => void;
 }
+/** Where the live dashboard's release is staged, inside the project checkout. */
+export declare const LIVE_STAGE_DIR: string;
+/**
+ * The ts-cloud version the box should install. Reads this package's own version
+ * so a box runs a dashboard matching the CLI that deployed it, rather than
+ * drifting to whatever `latest` happens to be mid-deploy.
+ */
+export declare function resolveDashboardVersion(): string;
+/**
+ * Stage the live dashboard's release: the project's cloud config (so the box
+ * can resolve the same sites) plus a `package.json` whose install pulls the CLI
+ * and UI from npm.
+ *
+ * Returns the staged directory relative to `cwd`, or null when the project has
+ * no cloud config to ship — without one the dashboard on the box would have
+ * nothing to describe.
+ */
+export declare function stageLiveDashboardRoot(cwd: string, logger: EnsureDashboardLogger): string | null;
 /**
- * Resolve the UI source to ship. Prefers the repo's local `packages/ui/` (built
- * on the deploy machine), then the prebuilt UI bundled in the installed package.
- * Returns `{ uiRoot, build }` or null when no UI is available.
+ * Resolve the UI source to ship (STATIC mode only — the live dashboard gets its
+ * UI from the npm package it installs on the box). Prefers the repo's local
+ * `packages/ui/` (built on the deploy machine), then the prebuilt UI bundled in
+ * the installed package. Returns `{ uiRoot, build }` or null when unavailable.
  */
 export declare function resolveUiSource(cwd: string): {
     uiRoot: string;

package/dist/drivers/index.js

@@ -48,8 +48,8 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-xgnxz5dz.js";
-import"../chunk-49nmy775.js";
+} from "../chunk-kcxxwg3j.js";
+import"../chunk-0tfwdnmf.js";
 import"../chunk-93hjhs78.js";
 import"../chunk-qpj3edwz.js";
 import"../chunk-vd87cpvn.js";

package/dist/drivers/shared/deploy-script.d.ts

@@ -25,6 +25,13 @@ export interface BuildSiteDeployScriptOptions {
      * `node_modules`.
      */
     preStartCommands?: string[];
+    /**
+     * Extra paths kept in `shared/` and symlinked into each release, so they
+     * survive a deploy. `.env` is always shared; anything the app WRITES and must
+     * keep (a state directory, a database file) has to be listed here or the next
+     * release silently starts from empty.
+     */
+    sharedPaths?: readonly string[];
     /**
      * True zero-downtime cutover for ported sites: the new release runs as its
      * own systemd instance (`<slug>-<site>@<releaseId>`) that binds the same

package/dist/index.js

@@ -55,10 +55,10 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "./chunk-qdhn1s7j.js";
+} from "./chunk-js3vrvvn.js";
 import {
   buildAndPushServerlessImage
-} from "./chunk-qgnyzfmx.js";
+} from "./chunk-5mejsd43.js";
 import {
   CloudWatchLogsClient,
   EFSClient,
@@ -105,7 +105,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-xgnxz5dz.js";
+} from "./chunk-kcxxwg3j.js";
 import {
   ABTestManager,
   AI,
@@ -137,6 +137,8 @@ import {
   ContainerRegistryManager,
   CredentialError,
   CrossRegionReferenceManager,
+  DASHBOARD_ENTRY,
+  DASHBOARD_STATE_DIR,
   DEFAULT_SERVICE_LIMITS,
   DLQMonitoringManager,
   DNS,
@@ -504,7 +506,7 @@ import {
   withSecurity,
   withTimeout,
   xrayManager
-} from "./chunk-49nmy775.js";
+} from "./chunk-0tfwdnmf.js";
 import {
   EC2Client,
   SSMClient
@@ -5118,6 +5120,8 @@ export {
   DNS,
   DLQMonitoringManager,
   DEFAULT_SERVICE_LIMITS,
+  DASHBOARD_STATE_DIR,
+  DASHBOARD_ENTRY,
   DASHBOARD_CREDENTIALS_FILE,
   CrossRegionReferenceManager,
   CredentialError,