@stacksjs/ts-cloud 0.7.5 → 0.7.7

package/dist/deploy/index.js

@@ -0,0 +1,87 @@
+import {
+  buildFunctionEnv,
+  dashboardActions,
+  deployServerlessApp,
+  deploySite,
+  infraEnvFromOutputs,
+  redeployServerlessApp,
+  resolveDashboardAction,
+  resolveDashboardData,
+  rollbackServerlessApp,
+  runRemoteCommand,
+  sanitizeCloudConfig,
+  setMaintenance,
+  startLocalDashboardServer
+} from "../chunk-x07dz3sd.js";
+import {
+  buildAndPushServerlessImage
+} from "../chunk-0wxyppza.js";
+import"../chunk-b82pbxyp.js";
+import"../chunk-hsk6fe6x.js";
+import {
+  DASHBOARD_CREDENTIALS_FILE,
+  MANAGEMENT_DASHBOARD_SITE,
+  buildManagementDashboardArtifact,
+  ensureManagementDashboard,
+  isPhpSite,
+  resolveDashboardAuth,
+  resolveSiteDeployTarget,
+  resolveSiteKind,
+  resolveUiSource,
+  validateDeploymentConfig
+} from "../chunk-xzn0ntr0.js";
+import"../chunk-c6rgvg1j.js";
+import"../chunk-93hjhs78.js";
+import {
+  deleteStaticSite,
+  deployStaticSite,
+  deployStaticSiteFull,
+  deployStaticSiteWithExternalDns,
+  deployStaticSiteWithExternalDnsFull,
+  generateExternalDnsStaticSiteTemplate,
+  generateStaticSiteTemplate,
+  invalidateCache,
+  uploadStaticFiles
+} from "../chunk-d7p84vz5.js";
+import"../chunk-tjjgajbh.js";
+import"../chunk-tt4kxske.js";
+import"../chunk-tnztxpcb.js";
+import"../chunk-qpj3edwz.js";
+import"../chunk-vd87cpvn.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  validateDeploymentConfig,
+  uploadStaticFiles,
+  startLocalDashboardServer,
+  setMaintenance,
+  sanitizeCloudConfig,
+  runRemoteCommand,
+  rollbackServerlessApp,
+  resolveUiSource,
+  resolveSiteKind,
+  resolveSiteDeployTarget,
+  resolveDashboardData,
+  resolveDashboardAuth,
+  resolveDashboardAction,
+  redeployServerlessApp,
+  isPhpSite,
+  invalidateCache,
+  infraEnvFromOutputs,
+  generateStaticSiteTemplate,
+  generateExternalDnsStaticSiteTemplate,
+  ensureManagementDashboard,
+  deployStaticSiteWithExternalDnsFull,
+  deployStaticSiteWithExternalDns,
+  deployStaticSiteFull,
+  deployStaticSite,
+  deploySite,
+  deployServerlessApp,
+  deleteStaticSite,
+  dashboardActions,
+  buildManagementDashboardArtifact,
+  buildFunctionEnv,
+  buildAndPushServerlessImage,
+  MANAGEMENT_DASHBOARD_SITE,
+  DASHBOARD_CREDENTIALS_FILE
+};

package/dist/dns/index.js

@@ -0,0 +1,31 @@
+import {
+  CloudflareProvider,
+  DnsProviderFactory,
+  GoDaddyProvider,
+  PorkbunProvider,
+  Route53Provider,
+  UnifiedDnsValidator,
+  createDnsProvider,
+  createGoDaddyValidator,
+  createPorkbunValidator,
+  createRoute53Validator,
+  detectDnsProvider,
+  dnsProviders
+} from "../chunk-tt4kxske.js";
+import"../chunk-tnztxpcb.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  dnsProviders,
+  detectDnsProvider,
+  createRoute53Validator,
+  createPorkbunValidator,
+  createGoDaddyValidator,
+  createDnsProvider,
+  UnifiedDnsValidator,
+  Route53Provider,
+  PorkbunProvider,
+  GoDaddyProvider,
+  DnsProviderFactory,
+  CloudflareProvider
+};

package/dist/drivers/index.d.ts

@@ -8,6 +8,8 @@ export { ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4 } from './
 export type { EnsuredResource, EnsuredServer, EnsureFirewallOptions, EnsureServerOptions, EnsureSshKeyOptions, } from './hetzner/provision';
 export { buildSshArgs, scpUpload, sshExec, sshExecOrThrow, waitForCloudInit, waitForSsh } from './shared/remote-exec';
 export type { RemoteExecOptions, RemoteExecResult, WaitOptions } from './shared/remote-exec';
+export { AwsBoxProvisioner, buildBoxUserData, createBoxProvisioner, HetznerBoxProvisioner, UBUNTU_2404_AMI_PARAM, } from './shared/box-provision';
+export type { AwsBoxProvisionerOptions, BoxPort, BoxProviderName, BoxProvisioner, BoxSpec, CreateBoxProvisionerOptions, ProvisionedBox, } from './shared/box-provision';
 export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, } from './shared/deploy-script';
 export { deployAllComputeSites, deploySiteRelease, reloadRpxGateway } from './shared/compute-deploy';
 export { buildRpxConfig, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';

package/dist/drivers/index.js

@@ -0,0 +1,108 @@
+import {
+  AwsBoxProvisioner,
+  AwsDriver,
+  CloudDriverFactory,
+  DEFAULT_RPX_CERTS_DIR,
+  HetznerBoxProvisioner,
+  HetznerClient,
+  HetznerDriver,
+  LocalBoxDriver,
+  MANAGED_CACHE_POLICY_DISABLED,
+  MANAGED_CACHE_POLICY_OPTIMIZED,
+  MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,
+  RPX_DIR,
+  RPX_LAUNCHER_PATH,
+  RPX_SERVICE_NAME,
+  UBUNTU_2404_AMI_PARAM,
+  buildAwsArtifactFetch,
+  buildBoxUserData,
+  buildCloudFrontOriginConfig,
+  buildLocalArtifactFetch,
+  buildRpxConfig,
+  buildRpxLbConfig,
+  buildRpxProvisionScript,
+  buildSiteDeployScript,
+  buildSshArgs,
+  buildStaticSiteDeployScript,
+  buildUbuntuBootstrapScript,
+  cloudDrivers,
+  createBoxProvisioner,
+  createCloudDriver,
+  deployAllComputeSites,
+  deploySiteRelease,
+  deriveRouteId,
+  ensureFirewall,
+  ensureServer,
+  ensureSshKey,
+  isBoxMode,
+  normalizeRoutePath,
+  normalizeSshPublicKey,
+  reloadRpxGateway,
+  renderRpxLauncher,
+  resolveExecStart,
+  resolveHetznerApiToken,
+  scpUpload,
+  serverPublicIpv4,
+  sshExec,
+  sshExecOrThrow,
+  waitForCloudInit,
+  waitForSsh,
+  wrapCloudInitUserData
+} from "../chunk-xzn0ntr0.js";
+import"../chunk-c6rgvg1j.js";
+import"../chunk-93hjhs78.js";
+import"../chunk-qpj3edwz.js";
+import"../chunk-vd87cpvn.js";
+import"../chunk-arsh1g5h.js";
+import"../chunk-v0bahtg2.js";
+export {
+  wrapCloudInitUserData,
+  waitForSsh,
+  waitForCloudInit,
+  sshExecOrThrow,
+  sshExec,
+  serverPublicIpv4,
+  scpUpload,
+  resolveHetznerApiToken,
+  resolveExecStart,
+  renderRpxLauncher,
+  reloadRpxGateway,
+  normalizeSshPublicKey,
+  normalizeRoutePath,
+  isBoxMode,
+  buildUbuntuBootstrapScript as generateUbuntuAppCloudInit,
+  ensureSshKey,
+  ensureServer,
+  ensureFirewall,
+  deriveRouteId,
+  deploySiteRelease,
+  deployAllComputeSites,
+  createCloudDriver,
+  createBoxProvisioner,
+  cloudDrivers,
+  buildStaticSiteDeployScript,
+  buildSshArgs,
+  buildSiteDeployScript,
+  buildRpxProvisionScript,
+  buildRpxLbConfig,
+  buildRpxConfig,
+  buildLocalArtifactFetch,
+  buildCloudFrontOriginConfig,
+  buildBoxUserData,
+  buildAwsArtifactFetch,
+  UBUNTU_2404_AMI_PARAM,
+  RPX_SERVICE_NAME,
+  RPX_LAUNCHER_PATH,
+  RPX_DIR,
+  MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER,
+  MANAGED_CACHE_POLICY_OPTIMIZED,
+  MANAGED_CACHE_POLICY_DISABLED,
+  LocalBoxDriver,
+  HetznerDriver,
+  HetznerClient,
+  HetznerBoxProvisioner,
+  DEFAULT_RPX_CERTS_DIR,
+  CloudDriverFactory,
+  AwsDriver,
+  AwsBoxProvisioner
+};

package/dist/drivers/shared/box-provision.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Provider-agnostic single-box provisioning.
+ *
+ * `createBoxProvisioner` gives deploy scripts one interface — ensure a named
+ * box exists (running, reachable, firewall open, SSH key authorized, bootstrap
+ * script run) and tear it down again — regardless of whether the box lives on
+ * Hetzner Cloud or AWS EC2. Idempotent like the underlying `ensure*` helpers:
+ * re-running converges instead of duplicating resources.
+ *
+ * SSH access is normalized to `root@<publicIp>`: the public key is injected
+ * via cloud-init (`disable_root: false` plus an authorized_keys append) so the
+ * same `sshExec(host, cmd)` calls work on both providers, even though AWS
+ * Ubuntu images default to the `ubuntu` user.
+ */
+import type { EC2Client } from '../../aws/ec2';
+import type { SSMClient } from '../../aws/ssm';
+import type { HetznerClient } from '../hetzner/client';
+export type BoxProviderName = 'hetzner' | 'aws';
+export interface BoxPort {
+    protocol: 'tcp' | 'udp' | 'icmp';
+    /** Port number; omit for icmp. */
+    port?: number;
+}
+export interface BoxSpec {
+    /** Resource name; also names the firewall/security group (`<name>-fw`/`<name>-sg`). */
+    name: string;
+    /** Provider-native size (Hetzner server type like `cx23`, EC2 instance type like `t3.micro`). */
+    size: string;
+    /** Hetzner image name or an `ami-...` id. Defaults to Ubuntu 24.04 on both providers. */
+    image?: string;
+    /** Hetzner location (e.g. `fsn1`). AWS placement follows the provisioner's region. */
+    location?: string;
+    /** Ingress to open in addition to tcp/22. */
+    ports?: BoxPort[];
+    /** OpenSSH public key authorized for root. */
+    sshPublicKey: string;
+    /** Plain bash bootstrap script, run once at first boot via cloud-init. */
+    bootstrapScript?: string;
+    labels?: Record<string, string>;
+}
+export interface ProvisionedBox {
+    provider: BoxProviderName;
+    id: string;
+    name: string;
+    publicIp: string;
+    created: boolean;
+}
+export interface BoxProvisioner {
+    readonly provider: BoxProviderName;
+    ensureBox(spec: BoxSpec): Promise<ProvisionedBox>;
+    /** Tear down the box and its firewall/security group. */
+    destroyBox(name: string): Promise<{
+        destroyed: string[];
+    }>;
+}
+/** SSM parameter for the current Ubuntu 24.04 amd64 gp3 AMI (Canonical-published). */
+export declare const UBUNTU_2404_AMI_PARAM = "/aws/service/canonical/ubuntu/server/24.04/stable/current/amd64/hvm/ebs-gp3/ami-id";
+/**
+ * Cloud-config shared by both providers: root SSH access with the given key
+ * (AWS Ubuntu images otherwise lock root and point at the `ubuntu` user) and
+ * the optional bootstrap script.
+ */
+export declare function buildBoxUserData(spec: Pick<BoxSpec, 'sshPublicKey' | 'bootstrapScript'>): string;
+export declare class HetznerBoxProvisioner implements BoxProvisioner {
+    private client;
+    readonly provider: "hetzner";
+    constructor(client: HetznerClient);
+    ensureBox(spec: BoxSpec): Promise<ProvisionedBox>;
+    destroyBox(name: string): Promise<{
+        destroyed: string[];
+    }>;
+}
+/** The EC2 surface the AWS provisioner uses (injectable for tests). */
+export type BoxEc2Client = Pick<EC2Client, 'describeInstances' | 'describeSecurityGroups' | 'createSecurityGroup' | 'authorizeSecurityGroupIngress' | 'runInstances' | 'terminateInstances' | 'deleteSecurityGroup' | 'getInstance'>;
+/** The SSM surface the AWS provisioner uses (injectable for tests). */
+export type BoxSsmClient = Pick<SSMClient, 'getParameter'>;
+export interface AwsBoxProvisionerOptions {
+    ec2: BoxEc2Client;
+    ssm: BoxSsmClient;
+}
+export declare class AwsBoxProvisioner implements BoxProvisioner {
+    readonly provider: "aws";
+    private ec2;
+    private ssm;
+    constructor(options: AwsBoxProvisionerOptions);
+    private findInstance;
+    private waitForPublicIp;
+    private ensureSecurityGroup;
+    private resolveImage;
+    ensureBox(spec: BoxSpec): Promise<ProvisionedBox>;
+    destroyBox(name: string): Promise<{
+        destroyed: string[];
+    }>;
+}
+export interface CreateBoxProvisionerOptions {
+    provider: BoxProviderName;
+    /** Required for provider 'hetzner'. */
+    hetzner?: HetznerClient;
+    /** Required for provider 'aws'. */
+    aws?: AwsBoxProvisionerOptions;
+}
+export declare function createBoxProvisioner(options: CreateBoxProvisionerOptions): BoxProvisioner;

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export type { MigrateEndpoint, MigrateError, MigrateOptions, MigratePlanItem, Mi
 export * from './ssl';
 export { deployStaticSite, deployStaticSiteFull, uploadStaticFiles, invalidateCache, deleteStaticSite, generateStaticSiteTemplate, deployStaticSiteWithExternalDns, deployStaticSiteWithExternalDnsFull, generateExternalDnsStaticSiteTemplate, deploySite, resolveSiteDeployTarget, resolveSiteKind, validateDeploymentConfig, buildAndPushServerlessImage, buildFunctionEnv, deployServerlessApp, infraEnvFromOutputs, redeployServerlessApp, rollbackServerlessApp, runRemoteCommand, setMaintenance, buildManagementDashboardArtifact, DASHBOARD_CREDENTIALS_FILE, ensureManagementDashboard, MANAGEMENT_DASHBOARD_SITE, resolveDashboardAuth, resolveUiSource, } from './deploy';
 export type { EnsureDashboardLogger, ResolvedDashboardAuth, StaticSiteConfig, DeployResult, UploadOptions, ExternalDnsStaticSiteConfig, ExternalDnsDeployResult, DeploySiteConfig, DeploySiteResult, StaticSiteDnsProvider, SiteDeployKind, DeploymentValidationResult, BuildImageOptions, BuiltImage, CodeSource, DeployServerlessOptions, ResolvedContext, } from './deploy';
-export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, HetznerClient, resolveHetznerApiToken, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, } from './drivers';
+export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, } from './drivers';
 export type { CreateCloudDriverOptions } from './drivers/factory';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';
 export type { DashboardAction, LocalDashboardServer, LocalDashboardServerOptions, } from './deploy/local-dashboard-server';