@stacksjs/ts-cloud 0.7.61 → 0.7.63

package/dist/{chunk-pbh6b828.js → chunk-0zbqbrqg.js}

@@ -3821,7 +3821,8 @@ function buildResetReleaseDir(paths) {
   return [
     `rm -rf ${staging}`,
     `mkdir -p ${staging}`,
-    `if [ "$(readlink -f ${paths.current} 2>/dev/null || true)" = "${paths.release}" ]; then`,
+    ...buildIsReleaseLive(paths),
+    'if [ "$TS_CLOUD_IS_LIVE" = "yes" ]; then',
     `  TS_CLOUD_STAGED=${staging}`,
     "else",
     `  rm -rf ${paths.release}`,
@@ -3831,13 +3832,26 @@ function buildResetReleaseDir(paths) {
     "fi"
   ];
 }
+function buildStrandedReleaseTrap(paths) {
+  const live = `TS_CLOUD_TRAP_LIVE="$(readlink -f ${paths.current} 2>/dev/null || true)"`;
+  const target = `TS_CLOUD_TRAP_TARGET="$(readlink -f ${paths.release} 2>/dev/null || echo ${paths.release})"`;
+  const body = `if [ $? -ne 0 ]; then ${live}; ${target}; [ "$TS_CLOUD_TRAP_LIVE" = "$TS_CLOUD_TRAP_TARGET" ] || rm -rf ${paths.release}; fi`;
+  return `trap '${body}' EXIT`;
+}
+function buildIsReleaseLive(paths) {
+  return [
+    `TS_CLOUD_LIVE_PATH="$(readlink -f ${paths.current} 2>/dev/null || true)"`,
+    `TS_CLOUD_RELEASE_PATH="$(readlink -f ${paths.release} 2>/dev/null || echo ${paths.release})"`,
+    'if [ -n "$TS_CLOUD_LIVE_PATH" ] && [ "$TS_CLOUD_LIVE_PATH" = "$TS_CLOUD_RELEASE_PATH" ]; then TS_CLOUD_IS_LIVE=yes; else TS_CLOUD_IS_LIVE=no; fi'
+  ];
+}
 function buildPromoteStagedRelease(paths) {
   const staging = `${paths.release}.incoming`;
   return [
     `if [ "$TS_CLOUD_STAGED" = "${staging}" ]; then`,
     `  rm -rf ${paths.release}.previous`,
-    `  mv -T ${paths.release} ${paths.release}.previous`,
-    `  mv -T ${staging} ${paths.release}`,
+    `  mv ${paths.release} ${paths.release}.previous`,
+    `  mv ${staging} ${paths.release}`,
     `  rm -rf ${paths.release}.previous`,
     "fi"
   ];
@@ -3956,7 +3970,7 @@ function buildSiteDeployScript(options) {
   const stageRelease = [
     "set -euo pipefail",
     ...buildDeployLock(paths),
-    `trap 'if [ $? -ne 0 ] && [ "$(readlink -f ${paths.current} 2>/dev/null || true)" != "${paths.release}" ]; then rm -rf ${paths.release}; fi' EXIT`,
+    buildStrandedReleaseTrap(paths),
     ...artifactFetch,
     ...buildEnsureReleaseLayout(paths, sharedPaths),
     ...buildResetReleaseDir(paths),
@@ -3997,7 +4011,7 @@ function buildSiteDeployScript(options) {
       "systemctl daemon-reload",
       `TS_CLOUD_OLD_UNITS=$(systemctl list-units --plain --no-legend --type=service "${unitBase}@*.service" 2>/dev/null | awk '{print $1}' | grep -v "^${instance}$" || true)`,
       `if [ -f /etc/systemd/system/${serviceName} ] && systemctl is-active --quiet ${serviceName}; then echo "[ts-cloud] retiring pre-zero-downtime unit ${serviceName} (one-time restart cutover)"; systemctl stop ${serviceName}; fi`,
-      `systemctl start ${instance}`,
+      `systemctl restart ${instance}`,
       `TS_CLOUD_GATE_OK=1; for TS_CLOUD_I in $(seq 1 ${Math.max(1, healthGateSeconds)}); do sleep 1; systemctl is-active --quiet ${instance} || { TS_CLOUD_GATE_OK=0; break; }; done`,
       `if [ "$TS_CLOUD_GATE_OK" -ne 1 ]; then echo "[ts-cloud] release ${releaseId} could not overlap the previous release (no SO_REUSEPORT?) — retiring old instances and retrying" >&2; for TS_CLOUD_RU in \${TS_CLOUD_OLD_UNITS}; do systemctl stop "$TS_CLOUD_RU" 2>/dev/null || true; done; systemctl restart ${instance}; for TS_CLOUD_I in $(seq 1 ${Math.max(1, healthGateSeconds)}); do sleep 1; systemctl is-active --quiet ${instance} || ${failGate}; done; fi`,
       ...gatePath ? [`curl -sf -o /dev/null --max-time 10 "http://127.0.0.1:${port}${gatePath}" || ${failGate}`] : [],
@@ -4045,7 +4059,7 @@ function buildStaticSiteDeployScript(options) {
   return [
     "set -euo pipefail",
     ...buildDeployLock(paths),
-    `trap 'if [ $? -ne 0 ] && [ "$(readlink -f ${paths.current} 2>/dev/null || true)" != "${paths.release}" ]; then rm -rf ${paths.release}; fi' EXIT`,
+    buildStrandedReleaseTrap(paths),
     ...artifactFetch,
     ...buildEnsureReleaseLayout(paths, []),
     ...buildResetReleaseDir(paths),

package/dist/{chunk-c82m4yzn.js → chunk-t092y37p.js}

@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-pbh6b828.js";
+} from "./chunk-0zbqbrqg.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-c82m4yzn.js";
+} from "../chunk-t092y37p.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -65,7 +65,7 @@ import {
   shipsARelease,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-pbh6b828.js";
+} from "../chunk-0zbqbrqg.js";
 import"../chunk-tq46tnxv.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/index.js

@@ -52,7 +52,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-pbh6b828.js";
+} from "../chunk-0zbqbrqg.js";
 import"../chunk-tq46tnxv.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/shared/releases.d.ts

@@ -70,6 +70,28 @@ export declare function buildDeployLock(paths: ReleasePaths, waitSeconds?: numbe
  * two renames, which is atomic enough that no request lands mid-swap.
  */
 export declare function buildResetReleaseDir(paths: ReleasePaths): string[];
+/**
+ * Remove a half-built release if the deploy fails before it went live.
+ *
+ * The check has to run *when the trap fires*, not when it is armed. A deploy
+ * arms this at the top and activates the release much later, so a value
+ * computed up front says "not live" for the rest of the script — and a failure
+ * in any step after activation would then delete the release the site had just
+ * started serving. Both paths are resolved at that moment for the reason in
+ * {@link buildIsReleaseLive}.
+ */
+export declare function buildStrandedReleaseTrap(paths: ReleasePaths): string;
+/**
+ * Set `TS_CLOUD_IS_LIVE` to "yes" when `current` resolves to this release.
+ *
+ * Both sides are resolved before comparing. Comparing a resolved `current`
+ * against the literal release path looks equivalent and is not: one symlinked
+ * ancestor anywhere above the site — `/var/www` moved onto a data volume, a
+ * `/tmp` that is really `/private/tmp` — makes the two spellings differ, the
+ * guard misses, and the branch it was guarding deletes the directory the site
+ * is being served from.
+ */
+export declare function buildIsReleaseLive(paths: ReleasePaths): string[];
 /**
  * Move a staged release into place, if it was staged (see
  * {@link buildResetReleaseDir}). A no-op when the deploy extracted directly.

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-c82m4yzn.js";
+} from "./chunk-t092y37p.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -398,7 +398,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-pbh6b828.js";
+} from "./chunk-0zbqbrqg.js";
 import {
   ABTestManager,
   AI,