@stacksjs/ts-cloud 0.7.4 → 0.7.6

package/dist/deploy/index.js

@@ -0,0 +1,87 @@
+import {
+  buildFunctionEnv,
+  dashboardActions,
+  deployServerlessApp,
+  deploySite,
+  infraEnvFromOutputs,
+  redeployServerlessApp,
+  resolveDashboardAction,
+  resolveDashboardData,
+  rollbackServerlessApp,
+  runRemoteCommand,
+  sanitizeCloudConfig,
+  setMaintenance,
+  startLocalDashboardServer
+} from "../chunk-p6309384.js";
+import {
+  buildAndPushServerlessImage
+} from "../chunk-0wxyppza.js";
+import"../chunk-b82pbxyp.js";
+import"../chunk-hsk6fe6x.js";
+import {
+  DASHBOARD_CREDENTIALS_FILE,
+  MANAGEMENT_DASHBOARD_SITE,
+  buildManagementDashboardArtifact,
+  ensureManagementDashboard,
+  isPhpSite,
+  resolveDashboardAuth,
+  resolveSiteDeployTarget,
+  resolveSiteKind,
+  resolveUiSource,
+  validateDeploymentConfig
+} from "../chunk-dpkk640m.js";
+import"../chunk-c6rgvg1j.js";
+import"../chunk-93hjhs78.js";
+import {
+  deleteStaticSite,
+  deployStaticSite,
+  deployStaticSiteFull,
+  deployStaticSiteWithExternalDns,
+  deployStaticSiteWithExternalDnsFull,
+  generateExternalDnsStaticSiteTemplate,
+  generateStaticSiteTemplate,
+  invalidateCache,
+  uploadStaticFiles
+} from "../chunk-d7p84vz5.js";
+import"../chunk-tjjgajbh.js";
+import"../chunk-tt4kxske.js";
+import"../chunk-tnztxpcb.js";
+import"../chunk-qpj3edwz.js";
+import"../chunk-vd87cpvn.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  validateDeploymentConfig,
+  uploadStaticFiles,
+  startLocalDashboardServer,
+  setMaintenance,
+  sanitizeCloudConfig,
+  runRemoteCommand,
+  rollbackServerlessApp,
+  resolveUiSource,
+  resolveSiteKind,
+  resolveSiteDeployTarget,
+  resolveDashboardData,
+  resolveDashboardAuth,
+  resolveDashboardAction,
+  redeployServerlessApp,
+  isPhpSite,
+  invalidateCache,
+  infraEnvFromOutputs,
+  generateStaticSiteTemplate,
+  generateExternalDnsStaticSiteTemplate,
+  ensureManagementDashboard,
+  deployStaticSiteWithExternalDnsFull,
+  deployStaticSiteWithExternalDns,
+  deployStaticSiteFull,
+  deployStaticSite,
+  deploySite,
+  deployServerlessApp,
+  deleteStaticSite,
+  dashboardActions,
+  buildManagementDashboardArtifact,
+  buildFunctionEnv,
+  buildAndPushServerlessImage,
+  MANAGEMENT_DASHBOARD_SITE,
+  DASHBOARD_CREDENTIALS_FILE
+};

package/dist/dns/index.js

@@ -0,0 +1,31 @@
+import {
+  CloudflareProvider,
+  DnsProviderFactory,
+  GoDaddyProvider,
+  PorkbunProvider,
+  Route53Provider,
+  UnifiedDnsValidator,
+  createDnsProvider,
+  createGoDaddyValidator,
+  createPorkbunValidator,
+  createRoute53Validator,
+  detectDnsProvider,
+  dnsProviders
+} from "../chunk-tt4kxske.js";
+import"../chunk-tnztxpcb.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  dnsProviders,
+  detectDnsProvider,
+  createRoute53Validator,
+  createPorkbunValidator,
+  createGoDaddyValidator,
+  createDnsProvider,
+  UnifiedDnsValidator,
+  Route53Provider,
+  PorkbunProvider,
+  GoDaddyProvider,
+  DnsProviderFactory,
+  CloudflareProvider
+};

package/dist/drivers/hetzner/provision.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Idempotent find-or-create provisioning helpers on top of the Hetzner client.
+ *
+ * These are the building blocks for "deploy X onto a Hetzner box" scripts:
+ * each helper reuses an existing resource when one matches (by name, or by
+ * key body for SSH keys) and creates it otherwise, so re-running a deploy
+ * converges instead of failing on duplicates.
+ */
+import type { CreateServerOptions, HetznerClient, HetznerFirewallRule, HetznerServer } from './client';
+export interface EnsuredResource {
+    id: number;
+    name: string;
+    created: boolean;
+}
+export interface EnsureSshKeyOptions {
+    /** Name used if the key needs to be registered. */
+    name: string;
+    /** OpenSSH public key (`<type> <base64> [comment]`). */
+    publicKey: string;
+    labels?: Record<string, string>;
+}
+/**
+ * Register an SSH public key, reusing any already-registered key with the
+ * same body (comment/whitespace differences ignored) regardless of its name.
+ */
+export declare function ensureSshKey(client: HetznerClient, options: EnsureSshKeyOptions): Promise<EnsuredResource>;
+export interface EnsureFirewallOptions {
+    name: string;
+    rules: HetznerFirewallRule[];
+    labels?: Record<string, string>;
+}
+/**
+ * Find a firewall by name and sync its rules to the given set, or create it.
+ * Rules are replaced in-place on reuse so the firewall always matches the
+ * declared config.
+ */
+export declare function ensureFirewall(client: HetznerClient, options: EnsureFirewallOptions): Promise<EnsuredResource>;
+export interface EnsureServerOptions extends CreateServerOptions {
+    /** Wait until the (created or reused) server reaches `running`. @default true */
+    waitForRunning?: boolean;
+}
+export interface EnsuredServer {
+    server: HetznerServer;
+    created: boolean;
+}
+/**
+ * Find a server by name or create it, waiting until it is running by default.
+ * Creation options (`userData`, `sshKeys`, `firewalls`, ...) only apply when
+ * the server does not exist yet — an existing server is reused as-is.
+ */
+export declare function ensureServer(client: HetznerClient, options: EnsureServerOptions): Promise<EnsuredServer>;
+/** The public IPv4 of a server, throwing when it has none. */
+export declare function serverPublicIpv4(server: HetznerServer): string;

package/dist/drivers/index.d.ts

@@ -2,8 +2,12 @@ export * from './factory';
 export { AwsDriver } from './aws/driver';
 export { HetznerDriver } from './hetzner/driver';
 export { isBoxMode, LocalBoxDriver } from './local-box/driver';
-export { HetznerClient, resolveHetznerApiToken } from './hetzner/client';
+export { HetznerClient, normalizeSshPublicKey, resolveHetznerApiToken } from './hetzner/client';
 export { generateUbuntuAppCloudInit, wrapCloudInitUserData } from './hetzner/cloud-init';
+export { ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4 } from './hetzner/provision';
+export type { EnsuredResource, EnsuredServer, EnsureFirewallOptions, EnsureServerOptions, EnsureSshKeyOptions, } from './hetzner/provision';
+export { buildSshArgs, scpUpload, sshExec, sshExecOrThrow, waitForCloudInit, waitForSsh } from './shared/remote-exec';
+export type { RemoteExecOptions, RemoteExecResult, WaitOptions } from './shared/remote-exec';
 export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, } from './shared/deploy-script';
 export { deployAllComputeSites, deploySiteRelease, reloadRpxGateway } from './shared/compute-deploy';
 export { buildRpxConfig, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';

package/dist/drivers/index.js

@@ -0,0 +1,98 @@
+import {
+  AwsDriver,
+  CloudDriverFactory,
+  DEFAULT_RPX_CERTS_DIR,
+  HetznerClient,
+  HetznerDriver,
+  LocalBoxDriver,
+  MANAGED_CACHE_POLICY_DISABLED,
+  MANAGED_CACHE_POLICY_OPTIMIZED,
+  MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,
+  RPX_DIR,
+  RPX_LAUNCHER_PATH,
+  RPX_SERVICE_NAME,
+  buildAwsArtifactFetch,
+  buildCloudFrontOriginConfig,
+  buildLocalArtifactFetch,
+  buildRpxConfig,
+  buildRpxLbConfig,
+  buildRpxProvisionScript,
+  buildSiteDeployScript,
+  buildSshArgs,
+  buildStaticSiteDeployScript,
+  buildUbuntuBootstrapScript,
+  cloudDrivers,
+  createCloudDriver,
+  deployAllComputeSites,
+  deploySiteRelease,
+  deriveRouteId,
+  ensureFirewall,
+  ensureServer,
+  ensureSshKey,
+  isBoxMode,
+  normalizeRoutePath,
+  normalizeSshPublicKey,
+  reloadRpxGateway,
+  renderRpxLauncher,
+  resolveExecStart,
+  resolveHetznerApiToken,
+  scpUpload,
+  serverPublicIpv4,
+  sshExec,
+  sshExecOrThrow,
+  waitForCloudInit,
+  waitForSsh,
+  wrapCloudInitUserData
+} from "../chunk-dpkk640m.js";
+import"../chunk-c6rgvg1j.js";
+import"../chunk-93hjhs78.js";
+import"../chunk-qpj3edwz.js";
+import"../chunk-vd87cpvn.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  wrapCloudInitUserData,
+  waitForSsh,
+  waitForCloudInit,
+  sshExecOrThrow,
+  sshExec,
+  serverPublicIpv4,
+  scpUpload,
+  resolveHetznerApiToken,
+  resolveExecStart,
+  renderRpxLauncher,
+  reloadRpxGateway,
+  normalizeSshPublicKey,
+  normalizeRoutePath,
+  isBoxMode,
+  buildUbuntuBootstrapScript as generateUbuntuAppCloudInit,
+  ensureSshKey,
+  ensureServer,
+  ensureFirewall,
+  deriveRouteId,
+  deploySiteRelease,
+  deployAllComputeSites,
+  createCloudDriver,
+  cloudDrivers,
+  buildStaticSiteDeployScript,
+  buildSshArgs,
+  buildSiteDeployScript,
+  buildRpxProvisionScript,
+  buildRpxLbConfig,
+  buildRpxConfig,
+  buildLocalArtifactFetch,
+  buildCloudFrontOriginConfig,
+  buildAwsArtifactFetch,
+  RPX_SERVICE_NAME,
+  RPX_LAUNCHER_PATH,
+  RPX_DIR,
+  MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,
+  MANAGED_CACHE_POLICY_OPTIMIZED,
+  MANAGED_CACHE_POLICY_DISABLED,
+  LocalBoxDriver,
+  HetznerDriver,
+  HetznerClient,
+  DEFAULT_RPX_CERTS_DIR,
+  CloudDriverFactory,
+  AwsDriver
+};

package/dist/drivers/shared/remote-exec.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Minimal SSH/scp helpers for driving a freshly-provisioned box from a deploy
+ * script, plus wait loops for the boot milestones every provider shares
+ * (sshd accepting connections, cloud-init finished).
+ *
+ * Uses the system `ssh`/`scp` binaries via Bun.spawn — no keys or agents are
+ * managed here; pass `identityFile` or rely on the ambient SSH config.
+ */
+export interface RemoteExecOptions {
+    /** SSH user. @default 'root' */
+    user?: string;
+    /** Private key passed as `ssh -i`. Omit to use the ambient SSH config/agent. */
+    identityFile?: string;
+    /** SSH `ConnectTimeout` in seconds. @default 10 */
+    connectTimeoutSec?: number;
+}
+export interface RemoteExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * The ssh/scp CLI arguments implied by {@link RemoteExecOptions}. Host key
+ * checking is disabled because these helpers target freshly-created servers
+ * whose host keys cannot be known in advance.
+ */
+export declare function buildSshArgs(options?: RemoteExecOptions): string[];
+/** Run a command on the host over SSH, capturing exit code and output. */
+export declare function sshExec(host: string, command: string, options?: RemoteExecOptions): Promise<RemoteExecResult>;
+/** Like {@link sshExec}, but throws on non-zero exit and returns stdout. */
+export declare function sshExecOrThrow(host: string, command: string, options?: RemoteExecOptions): Promise<string>;
+/** Copy local files into a directory on the host via scp. */
+export declare function scpUpload(host: string, localPaths: string[], remoteDir: string, options?: RemoteExecOptions): Promise<void>;
+export interface WaitOptions extends RemoteExecOptions {
+    /** Give up after this long. */
+    timeoutMs?: number;
+    /** Delay between attempts. @default 5000 */
+    pollIntervalMs?: number;
+}
+/** Poll until sshd accepts the connection (box booted + key authorized). */
+export declare function waitForSsh(host: string, options?: WaitOptions): Promise<void>;
+/**
+ * Poll `cloud-init status` until it reports done. Throws when cloud-init
+ * reports an error so a broken first boot fails the deploy instead of
+ * surfacing later as missing packages.
+ */
+export declare function waitForCloudInit(host: string, options?: WaitOptions): Promise<void>;

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export type { MigrateEndpoint, MigrateError, MigrateOptions, MigratePlanItem, Mi
 export * from './ssl';
 export { deployStaticSite, deployStaticSiteFull, uploadStaticFiles, invalidateCache, deleteStaticSite, generateStaticSiteTemplate, deployStaticSiteWithExternalDns, deployStaticSiteWithExternalDnsFull, generateExternalDnsStaticSiteTemplate, deploySite, resolveSiteDeployTarget, resolveSiteKind, validateDeploymentConfig, buildAndPushServerlessImage, buildFunctionEnv, deployServerlessApp, infraEnvFromOutputs, redeployServerlessApp, rollbackServerlessApp, runRemoteCommand, setMaintenance, buildManagementDashboardArtifact, DASHBOARD_CREDENTIALS_FILE, ensureManagementDashboard, MANAGEMENT_DASHBOARD_SITE, resolveDashboardAuth, resolveUiSource, } from './deploy';
 export type { EnsureDashboardLogger, ResolvedDashboardAuth, StaticSiteConfig, DeployResult, UploadOptions, ExternalDnsStaticSiteConfig, ExternalDnsDeployResult, DeploySiteConfig, DeploySiteResult, StaticSiteDnsProvider, SiteDeployKind, DeploymentValidationResult, BuildImageOptions, BuiltImage, CodeSource, DeployServerlessOptions, ResolvedContext, } from './deploy';
-export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, HetznerClient, resolveHetznerApiToken, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, } from './drivers';
+export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, } from './drivers';
 export type { CreateCloudDriverOptions } from './drivers/factory';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';
 export type { DashboardAction, LocalDashboardServer, LocalDashboardServerOptions, } from './deploy/local-dashboard-server';