@stacksjs/ts-cloud 0.7.55 → 0.7.57

package/dist/drivers/shared/notifications.d.ts

@@ -9,7 +9,7 @@
  *  - {@link buildNotifierScript} — generates an on-box `ts-cloud-notify`
  *    helper that cron-driven events (certbot renewal, backups) can call.
  */
-import type { NotifyEvent, NotificationsConfig } from '@ts-cloud/core';
+import type { NotificationsConfig, NotifyEvent } from '@ts-cloud/core';
 /** Fetch implementation (injectable for tests). */
 export type FetchLike = (input: string, init?: {
     method?: string;

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -118,6 +118,7 @@ export interface RpxGatewayConfig {
         allowedSuffixes: string[];
         email?: string;
         certsDir: string;
+        staging: boolean;
     };
     /**
      * Directory the gateway serves ACME http-01 challenge tokens from on `:80`

package/dist/fleet/fleet.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fleet/index.d.ts

@@ -0,0 +1,144 @@
+import type { ControlPlaneOperation, ControlPlaneStore, JsonValue } from '../control-plane';
+import { DurableOperationQueue } from '../queue';
+export * from './ssh-driver';
+export * from './queue';
+export type ServerProvider = 'aws' | 'hetzner' | 'ssh';
+export type ServerRole = 'application' | 'build' | 'worker' | 'monitoring' | 'backup' | 'control_plane';
+export interface ServerFacts {
+    os?: string;
+    arch?: string;
+    cpuCores?: number;
+    memoryBytes?: number;
+    diskBytes?: number;
+    diskFreeBytes?: number;
+    dnsOk?: boolean;
+    timeSkewSeconds?: number;
+    tools?: Record<string, string>;
+    ports?: number[];
+    privilege?: string;
+    proxyVersion?: string;
+    runtimeVersions?: Record<string, string>;
+    firewall?: string;
+    network?: Record<string, JsonValue>;
+}
+export interface ValidationFinding {
+    code: string;
+    severity: 'info' | 'warning' | 'error';
+    message: string;
+    remediation?: string;
+}
+export interface ServerValidation {
+    valid: boolean;
+    facts: ServerFacts;
+    findings: ValidationFinding[];
+    validatedAt: string;
+    validatorVersion: string;
+}
+export interface FleetServer {
+    id: string;
+    organizationId: string;
+    projectId: string;
+    resourceId: string;
+    name: string;
+    provider: ServerProvider;
+    providerId?: string;
+    region?: string;
+    zone?: string;
+    endpoint: string;
+    sshUser: string;
+    sshPort: number;
+    credentialRef: string;
+    hostKeyAlgorithm?: string;
+    hostKeyFingerprint?: string;
+    pendingHostKey?: string;
+    roles: ServerRole[];
+    labels: Record<string, string>;
+    taints: string[];
+    capacity: Record<string, number>;
+    usage: Record<string, number>;
+    capabilities: Record<string, {
+        supported: boolean;
+        reason?: string;
+    }>;
+    status: 'pending' | 'validating' | 'ready' | 'degraded' | 'unreachable' | 'draining' | 'drained' | 'archived';
+    trustState: 'unverified' | 'pinned' | 'rotation_pending' | 'blocked';
+    validation?: ServerValidation;
+    bootstrapVersion?: string;
+    heartbeatAt?: string;
+    lastSeenAt?: string;
+    archivedAt?: string;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface FleetDriver {
+    provider: ServerProvider;
+    discover(projectId: string): Promise<Array<{
+        providerId: string;
+        name: string;
+        endpoint: string;
+        region?: string;
+        zone?: string;
+    }>>;
+    test(server: FleetServer): Promise<{
+        reachable: boolean;
+        hostKeyAlgorithm: string;
+        hostKeyFingerprint: string;
+        latencyMs: number;
+    }>;
+    validate(server: FleetServer): Promise<ServerFacts>;
+    bootstrap(server: FleetServer, steps: string[]): Promise<{
+        version: string;
+    }>;
+    capabilities(server?: FleetServer): FleetServer['capabilities'];
+}
+export declare class FleetStore {
+    readonly control: ControlPlaneStore;
+    private now;
+    private id;
+    constructor(control: ControlPlaneStore, now?: () => Date, id?: () => string);
+    get(id: string): FleetServer | undefined;
+    list(projectId: string, includeArchived?: boolean): FleetServer[];
+    findProvider(organizationId: string, provider: ServerProvider, providerId: string): FleetServer | undefined;
+    create(input: Omit<FleetServer, 'id' | 'version' | 'createdAt' | 'updatedAt'>): FleetServer;
+    update(id: string, patch: Partial<FleetServer>): FleetServer;
+}
+export interface FleetBootstrapResult {
+    preview: boolean;
+    steps: string[];
+    operation?: ControlPlaneOperation;
+}
+export declare class FleetService {
+    readonly store: FleetStore;
+    readonly drivers: FleetDriver[];
+    private now;
+    readonly queue: DurableOperationQueue;
+    constructor(store: FleetStore, drivers: FleetDriver[], queue?: DurableOperationQueue, now?: () => Date);
+    private driver;
+    enroll(input: {
+        organizationId: string;
+        projectId: string;
+        name: string;
+        provider: ServerProvider;
+        providerId?: string;
+        region?: string;
+        zone?: string;
+        endpoint: string;
+        sshUser: string;
+        sshPort?: number;
+        credentialRef: string;
+        roles: ServerRole[];
+        labels?: Record<string, string>;
+    }): FleetServer;
+    test(id: string): Promise<FleetServer>;
+    reviewHostKey(id: string, fingerprint: string): FleetServer;
+    validate(id: string): Promise<FleetServer>;
+    bootstrap(id: string, confirmed?: boolean): FleetBootstrapResult;
+    heartbeat(id: string, input: {
+        usage: Record<string, number>;
+        capabilities?: FleetServer['capabilities'];
+    }): FleetServer;
+    drain(id: string, drained?: boolean): FleetServer;
+    uncordon(id: string): FleetServer;
+    archive(id: string, confirmation: string): FleetServer;
+}

package/dist/fleet/queue.d.ts

@@ -0,0 +1,3 @@
+import type { QueueOperationHandler } from '../queue';
+import type { FleetDriver, FleetStore } from './index';
+export declare function createFleetQueueHandlers(store: FleetStore, drivers: readonly FleetDriver[]): Record<string, QueueOperationHandler>;

package/dist/fleet/ssh-driver.d.ts

@@ -0,0 +1,34 @@
+import type { FleetDriver, FleetServer, ServerFacts, ServerProvider } from './index';
+export interface FleetSshTransport {
+    scan(endpoint: string, port: number): Promise<{
+        algorithm: string;
+        key: string;
+    }>;
+    exec(server: FleetServer, command: string): Promise<{
+        code: number;
+        stdout: string;
+        stderr: string;
+    }>;
+}
+export declare class SystemFleetSshTransport implements FleetSshTransport {
+    scan(endpoint: string, port: number): Promise<{
+        algorithm: string;
+        key: string;
+    }>;
+    exec(server: FleetServer, command: string): Promise<{
+        code: number;
+        stdout: string;
+        stderr: string;
+    }>;
+}
+export declare class SshFleetDriver implements FleetDriver {
+    readonly provider: ServerProvider;
+    private transport;
+    private discoverer?;
+    constructor(provider: ServerProvider, transport?: FleetSshTransport, discoverer?: FleetDriver['discover'] | undefined);
+    discover(projectId: string): ReturnType<FleetDriver['discover']>;
+    test(server: FleetServer): ReturnType<FleetDriver['test']>;
+    validate(server: FleetServer): Promise<ServerFacts>;
+    bootstrap(server: FleetServer, steps: string[]): ReturnType<FleetDriver['bootstrap']>;
+    capabilities(): FleetServer['capabilities'];
+}

package/dist/index.d.ts

@@ -1,22 +1,46 @@
 export * from './config';
+export * from './auth';
+export * from './automation';
+export * from './api';
+export * from './control-plane';
+export * from './security';
+export * from './preview';
+export * from './compose';
+export * from './release';
+export * from './runtime';
+export * from './telemetry';
+export { AlertEvaluator, AlertStore, HealthCheckRunner, NotificationRouter, evaluateTelemetryAlertRules, isQuietHours, } from './alerts';
+export type { Alert, AlertEvaluation, AlertRule, AlertSample, AlertSeverity, AlertState, HealthCheck as AlertHealthCheck, HealthResult as AlertHealthResult, HealthStatus as AlertHealthStatus, NotificationChannel as AlertNotificationChannel, NotificationDelivery as AlertNotificationDelivery, NotificationRoute as AlertNotificationRoute, } from './alerts';
+export * from './jobs';
+export * from './data-services';
+export * from './storage';
+export * from './fleet';
+export * from './placement';
+export * from './regions';
+export * from './maintenance';
+export * from './media';
 export * from './generators';
-export { validateTemplate, validateTemplateSize, validateResourceLimits, } from './validation';
+export { validateTemplate, validateTemplateSize, validateResourceLimits } from './validation';
 export type { ValidationError as TemplateValidationError, ValidationResult as TemplateValidationResult, } from './validation';
 export { AWSClient, CloudFormationClient, CloudFormationClient as AWSCloudFormationClient, CloudFrontClient, CloudFrontClient as AWSCloudFrontClient, EC2Client, S3Client, Route53Client, Route53DomainsClient, ACMClient, ACMDnsValidator, ECRClient, ECSClient, STSClient, SSMClient, SecretsManagerClient, SESClient, EmailClient, SNSClient, SQSClient, LambdaClient, CloudWatchLogsClient, ConnectClient, ELBv2Client, RDSClient, DynamoDBClient, OpenSearchClient, TranscribeClient, BedrockClient, BedrockRuntimeClient, ComprehendClient, RekognitionClient, TextractClient, PollyClient, TranslateClient, PersonalizeClient, KendraClient, EventBridgeClient, ElastiCacheClient, SchedulerClient, IAMClient, ApplicationAutoScalingClient, SmsClient, VoiceClient, SupportClient, EFSClient, } from './aws';
 export type { AWSRequestOptions, AWSClientConfig, AWSError, AWSCredentials as AWSClientCredentials, StackParameter, StackTag, CreateStackOptions, UpdateStackOptions, DescribeStacksOptions, StackEvent, Stack, InvalidationOptions, Distribution, S3SyncOptions, S3CopyOptions, S3ListOptions, S3Object, CertificateDetail, Certificate as ELBv2Certificate, RekognitionS3Object, RekognitionBoundingBox, TextractS3Object, TextractBoundingBox, CountryCode, ContactType, ContactDetail, KendraCreateDataSourceCommandInput, KendraCreateDataSourceCommandOutput, KendraListDataSourcesCommandInput, KendraListDataSourcesCommandOutput, InvokeModelCommandInput, InvokeModelCommandOutput, InvokeModelWithResponseStreamCommandInput, InvokeModelWithResponseStreamCommandOutput, CreateModelCustomizationJobCommandInput, CreateModelCustomizationJobCommandOutput, GetModelCustomizationJobCommandInput, GetModelCustomizationJobCommandOutput, ListFoundationModelsCommandInput, ListFoundationModelsCommandOutput, AttributeValue as DynamoDBAttributeValue, KeySchemaElement, AttributeDefinition as DynamoDBAttributeDefinition, } from './aws';
-export { createObjectStorageClient, providerEndpoint, resolveObjectStorage, } from './object-storage';
+export { createObjectStorageClient, providerEndpoint, resolveObjectStorage } from './object-storage';
 export type { ObjectStorageConfig, ObjectStorageCredentials, ObjectStorageProvider, ResolvedObjectStorage, } from './object-storage';
-export { keyMatchesFilters, migrateObjectStorage, remapKey, } from './object-storage/migrate';
+export { keyMatchesFilters, migrateObjectStorage, remapKey } from './object-storage/migrate';
 export type { MigrateEndpoint, MigrateError, MigrateOptions, MigratePlanItem, MigrateProgress, MigrateResult, MigrateVerification, } from './object-storage/migrate';
 export * from './ssl';
 export { deployStaticSite, deployStaticSiteFull, uploadStaticFiles, invalidateCache, deleteStaticSite, generateStaticSiteTemplate, deployStaticSiteWithExternalDns, deployStaticSiteWithExternalDnsFull, generateExternalDnsStaticSiteTemplate, deploySite, resolveSiteDeployTarget, resolveSiteKind, validateDeploymentConfig, buildAndPushServerlessImage, buildFunctionEnv, deployServerlessApp, infraEnvFromOutputs, redeployServerlessApp, rollbackServerlessApp, runRemoteCommand, setMaintenance, buildManagementDashboardArtifact, DASHBOARD_CREDENTIALS_FILE, ensureManagementDashboard, MANAGEMENT_DASHBOARD_SITE, resolveDashboardAuth, resolveUiSource, } from './deploy';
-export { collectServerDnsDomains, removeStaleServerAddressRecords, } from './deploy/server-dns';
+export { collectServerDnsDomains, removeStaleServerAddressRecords } from './deploy/server-dns';
 export type { EnsureDashboardLogger, ResolvedDashboardAuth, StaticSiteConfig, DeployResult, UploadOptions, ExternalDnsStaticSiteConfig, ExternalDnsDeployResult, DeploySiteConfig, DeploySiteResult, StaticSiteDnsProvider, SiteDeployKind, DeploymentValidationResult, BuildImageOptions, BuiltImage, CodeSource, DeployServerlessOptions, ResolvedContext, } from './deploy';
 export { createCloudDriver, CloudDriverFactory, cloudDrivers, AwsDriver, HetznerDriver, HetznerClient, resolveHetznerApiToken, normalizeSshPublicKey, ensureFirewall, ensureServer, ensureSshKey, serverPublicIpv4, sshExec, sshExecOrThrow, scpUpload, waitForSsh, waitForCloudInit, buildSshArgs, generateUbuntuAppCloudInit, wrapCloudInitUserData, buildHostCleanupScript, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, deployAllComputeSites, deploySiteRelease, } from './drivers';
 export type { CreateCloudDriverOptions } from './drivers/factory';
 export { dashboardActions, resolveDashboardAction, sanitizeCloudConfig, startLocalDashboardServer, } from './deploy/local-dashboard-server';
 export type { DashboardAction, LocalDashboardServer, LocalDashboardServerOptions, } from './deploy/local-dashboard-server';
 export { createDnsProvider, detectDnsProvider, DnsProviderFactory, dnsProviders, PorkbunProvider, GoDaddyProvider, Route53Provider, UnifiedDnsValidator, createPorkbunValidator, createGoDaddyValidator, createRoute53Validator, } from './dns';
+export * from './source';
+export * from './queue';
+export * from './backups';
+export * from './configuration';
 export type { DnsProvider, DnsProviderConfig, DnsRecord, DnsRecordType, DnsRecordResult, CreateRecordResult, DeleteRecordResult, ListRecordsResult, } from './dns';
 export * from '@ts-cloud/core';
 export type { S3Bucket, S3BucketPolicy, CloudFrontDistribution, CloudFrontOriginAccessControl, CloudFrontCacheBehavior, CloudFrontOrigin, } from '@ts-cloud/aws-types';