@stacksjs/ts-cloud 0.7.7 → 0.7.10

package/dist/{chunk-x07dz3sd.js → chunk-6va72rhh.js}

@@ -26,7 +26,7 @@ import {
   resolveSiteFramework,
   resolveSiteKind,
   resolveUiSource
-} from "./chunk-xzn0ntr0.js";
+} from "./chunk-7pym4v5b.js";
 import {
   artifactKey,
   composeServerlessAppTemplate,
@@ -11016,7 +11016,7 @@ async function rollbackComputeSite(ctx, options) {
   const paths = releasePaths(appBase, options.to || "unused");
   const commands = [
     "set -uo pipefail",
-    ...buildRollbackScript(paths, options.to ? { to: options.to } : {}),
+    ...buildRollbackScript(paths, { ...options.to ? { to: options.to } : {}, unitBase: `${ctx.slug}-${options.siteName}` }),
     `(cd ${PANTRY_PROJECT_DIR} && pantry restart php-fpm) 2>/dev/null || true`,
     `(cd ${paths.current} && eval "$(cd ${PANTRY_PROJECT_DIR} && pantry env 2>/dev/null)" && php artisan queue:restart) 2>/dev/null || true`
   ];

package/dist/{chunk-xzn0ntr0.js → chunk-7pym4v5b.js}

@@ -3496,15 +3496,11 @@ function buildActivateRelease(paths) {
   ];
 }
 function buildRollbackScript(paths, options = {}) {
-  if (options.to) {
-    const target = `${paths.releases}/${options.to}`;
-    return [
-      `[ -d ${target} ] || { echo "rollback target ${target} not found" >&2; exit 1; }`,
-      `ln -sfn ${target} ${paths.current}.tmp`,
-      `mv -Tf ${paths.current}.tmp ${paths.current}`
-    ];
-  }
-  return [
+  const flip = options.to ? [
+    `[ -d ${paths.releases}/${options.to} ] || { echo "rollback target ${paths.releases}/${options.to} not found" >&2; exit 1; }`,
+    `ln -sfn ${paths.releases}/${options.to} ${paths.current}.tmp`,
+    `mv -Tf ${paths.current}.tmp ${paths.current}`
+  ] : [
     `TS_CLOUD_CURRENT=$(readlink -f ${paths.current} 2>/dev/null || true)`,
     `TS_CLOUD_PREV=$(ls -1dt ${paths.releases}/*/ 2>/dev/null | sed 's#/$##' | while read -r r; do ` + '[ "$(readlink -f "$r")" != "$TS_CLOUD_CURRENT" ] && { echo "$r"; break; }; done)',
     '[ -n "$TS_CLOUD_PREV" ] || { echo "no previous release to roll back to" >&2; exit 1; }',
@@ -3512,6 +3508,14 @@ function buildRollbackScript(paths, options = {}) {
     `mv -Tf ${paths.current}.tmp ${paths.current}`,
     'echo "rolled back to $TS_CLOUD_PREV"'
   ];
+  if (!options.unitBase)
+    return flip;
+  const unitBase = options.unitBase;
+  return [
+    ...flip,
+    `TS_CLOUD_RB_ID=$(basename "$(readlink -f ${paths.current})")`,
+    `if [ -f /etc/systemd/system/${unitBase}@.service ]; then ` + `systemctl start "${unitBase}@\${TS_CLOUD_RB_ID}.service"; sleep 2; ` + `systemctl is-active --quiet "${unitBase}@\${TS_CLOUD_RB_ID}.service" || { echo "rolled-back release failed to start" >&2; exit 1; }; ` + `systemctl enable "${unitBase}@\${TS_CLOUD_RB_ID}.service" 2>/dev/null || true; ` + `systemctl list-units --plain --no-legend --type=service "${unitBase}@*.service" 2>/dev/null | awk '{print $1}' | grep -v "^${unitBase}@\${TS_CLOUD_RB_ID}.service$" | while read -r TS_CLOUD_U; do systemctl stop "$TS_CLOUD_U" 2>/dev/null || true; systemctl disable "$TS_CLOUD_U" 2>/dev/null || true; done; ` + `elif [ -f /etc/systemd/system/${unitBase}.service ]; then systemctl restart ${unitBase}.service; fi`
+  ];
 }
 function buildPruneReleases(paths, keep = DEFAULT_KEEP_RELEASES) {
   const n = Math.max(1, keep);
@@ -3559,15 +3563,19 @@ function buildSiteDeployScript(options) {
     envEntries,
     port,
     keepReleases = DEFAULT_KEEP_RELEASES,
-    preStartCommands = []
+    preStartCommands = [],
+    healthCheckPath,
+    healthGateSeconds = 5
   } = options;
+  const zeroDowntime = options.zeroDowntime ?? port != null;
   const base = options.appDir ?? `/var/www/${siteName}`;
   const paths = releasePaths(base, releaseId);
-  const serviceName = `${slug}-${siteName}.service`;
+  const unitBase = `${slug}-${siteName}`;
+  const serviceName = `${unitBase}.service`;
   const sharedPaths = [".env"];
   const envFile = formatEnvFile(envEntries);
   const preStart = preStartCommands.length > 0 ? [`cd ${paths.release}`, ...preStartCommands] : [];
-  return [
+  const stageRelease = [
     "set -euo pipefail",
     ...artifactFetch,
     ...buildEnsureReleaseLayout(paths, sharedPaths),
@@ -3579,7 +3587,47 @@ function buildSiteDeployScript(options) {
     "TS_CLOUD_ENV_EOF",
     `chmod 600 ${paths.shared}/.env`,
     ...buildLinkSharedPaths(paths, sharedPaths),
-    ...preStart,
+    ...preStart
+  ];
+  if (zeroDowntime && port != null) {
+    const instance = `${unitBase}@${releaseId}.service`;
+    const gatePath = healthCheckPath ? healthCheckPath.startsWith("/") ? healthCheckPath : `/${healthCheckPath}` : null;
+    const failGate = `{ echo "[ts-cloud] release ${releaseId} failed its health gate — previous release keeps serving" >&2; journalctl -u ${instance} -n 50 --no-pager >&2 || true; systemctl stop ${instance} 2>/dev/null || true; exit 1; }`;
+    return [
+      ...stageRelease,
+      `cat > /etc/systemd/system/${unitBase}@.service <<'TS_CLOUD_UNIT_EOF'`,
+      "[Unit]",
+      `Description=${siteName} release %i (managed by ts-cloud)`,
+      "After=network.target",
+      "",
+      "[Service]",
+      "Type=simple",
+      `WorkingDirectory=${paths.releases}/%i`,
+      `ExecStart=${execStart}`,
+      "Restart=always",
+      "RestartSec=5",
+      `EnvironmentFile=${paths.releases}/%i/.env`,
+      `Environment=PORT=${port}`,
+      "",
+      "[Install]",
+      "WantedBy=multi-user.target",
+      "TS_CLOUD_UNIT_EOF",
+      "systemctl daemon-reload",
+      `TS_CLOUD_OLD_UNITS=$(systemctl list-units --plain --no-legend --type=service "${unitBase}@*.service" 2>/dev/null | awk '{print $1}' | grep -v "^${instance}$" || true)`,
+      `if [ -f /etc/systemd/system/${serviceName} ] && systemctl is-active --quiet ${serviceName}; then echo "[ts-cloud] retiring pre-zero-downtime unit ${serviceName} (one-time restart cutover)"; systemctl stop ${serviceName}; fi`,
+      `systemctl start ${instance}`,
+      `for TS_CLOUD_I in $(seq 1 ${Math.max(1, healthGateSeconds)}); do sleep 1; systemctl is-active --quiet ${instance} || ${failGate}; done`,
+      ...gatePath ? [`curl -sf -o /dev/null --max-time 10 "http://127.0.0.1:${port}${gatePath}" || ${failGate}`] : [],
+      ...buildActivateRelease(paths),
+      `systemctl enable ${instance} 2>/dev/null || true`,
+      `for TS_CLOUD_U in \${TS_CLOUD_OLD_UNITS}; do systemctl stop "$TS_CLOUD_U" 2>/dev/null || true; systemctl disable "$TS_CLOUD_U" 2>/dev/null || true; done`,
+      `systemctl list-unit-files --plain --no-legend "${unitBase}@*.service" 2>/dev/null | awk '{print $1}' | grep -v "^${instance}$" | while read -r TS_CLOUD_U; do systemctl disable "$TS_CLOUD_U" 2>/dev/null || true; done`,
+      `if [ -f /etc/systemd/system/${serviceName} ]; then systemctl disable ${serviceName} 2>/dev/null || true; rm -f /etc/systemd/system/${serviceName}; systemctl daemon-reload; fi`,
+      ...buildPruneReleases(paths, keepReleases)
+    ];
+  }
+  return [
+    ...stageRelease,
     `cat > /etc/systemd/system/${serviceName} <<'TS_CLOUD_UNIT_EOF'`,
     "[Unit]",
     `Description=${siteName} (managed by ts-cloud)`,
@@ -4367,7 +4415,9 @@ async function deploySiteRelease(driver, options, logger = noopLogger2) {
     execStart: resolveExecStart(site.start, runtime),
     envEntries: site.env || {},
     port: site.port,
-    preStartCommands: site.preStart
+    preStartCommands: site.preStart,
+    zeroDowntime: site.zeroDowntime !== false,
+    healthCheckPath: site.healthCheck?.path
   });
   const compute = config.infrastructure?.compute;
   const wantsNginxStatic = kind === "server-static" && compute?.webServer !== "rpx" && !!site.domain;

package/dist/deploy/index.js

@@ -12,7 +12,7 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "../chunk-x07dz3sd.js";
+} from "../chunk-6va72rhh.js";
 import {
   buildAndPushServerlessImage
 } from "../chunk-0wxyppza.js";
@@ -29,7 +29,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   validateDeploymentConfig
-} from "../chunk-xzn0ntr0.js";
+} from "../chunk-7pym4v5b.js";
 import"../chunk-c6rgvg1j.js";
 import"../chunk-93hjhs78.js";
 import {

package/dist/drivers/index.js

@@ -48,7 +48,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-xzn0ntr0.js";
+} from "../chunk-7pym4v5b.js";
 import"../chunk-c6rgvg1j.js";
 import"../chunk-93hjhs78.js";
 import"../chunk-qpj3edwz.js";

package/dist/drivers/shared/deploy-script.d.ts

@@ -25,13 +25,47 @@ export interface BuildSiteDeployScriptOptions {
      * `node_modules`.
      */
     preStartCommands?: string[];
+    /**
+     * True zero-downtime cutover for ported sites: the new release runs as its
+     * own systemd instance (`<slug>-<site>@<releaseId>`) that binds the same
+     * port via SO_REUSEPORT while the old instance still serves, must pass a
+     * health gate, and only then is the old instance stopped. A release that
+     * crashes on boot fails the deploy with the old release still serving.
+     *
+     * Requires the app to bind with `reusePort` (Stacks' server does in
+     * production). Defaults to true when `port` is set; portless sites
+     * (queue workers, schedulers) always use the stop/start flow because two
+     * overlapping instances would double-process their work.
+     */
+    zeroDowntime?: boolean;
+    /**
+     * HTTP path polled on `127.0.0.1:<port>` as part of the health gate (e.g.
+     * `/health`). Optional — without it the gate is "the instance stays
+     * active for {@link BuildSiteDeployScriptOptions.healthGateSeconds}".
+     */
+    healthCheckPath?: string;
+    /**
+     * Seconds the new instance must stay active (and, with
+     * {@link BuildSiteDeployScriptOptions.healthCheckPath}, respond 2xx/3xx)
+     * before the old instance is stopped.
+     * @default 5
+     */
+    healthGateSeconds?: number;
 }
 /**
  * Build the remote shell commands that install/refresh a server-app site on a
- * compute target with a **zero-downtime atomic release** (Envoyer-style): unpack
- * into `releases/<id>`, link the shared `.env`, build, then atomically repoint
- * `current` and restart the systemd service (which runs from `current`). Old
- * releases are pruned for rollback.
+ * compute target with an atomic release (Envoyer-style): unpack into
+ * `releases/<id>`, link the shared `.env`, build, then cut over.
+ *
+ * The cutover has two modes:
+ * - **zero-downtime** (default for ported sites): the new release starts as a
+ *   templated systemd instance that shares the port via SO_REUSEPORT with the
+ *   still-running old instance, must pass a health gate, and only then does
+ *   the old instance stop — no dropped connections, and a crash-on-boot
+ *   release fails the deploy with the old one still serving.
+ * - **restart** (portless sites, or `zeroDowntime: false`): the classic flip
+ *   `current` + `systemctl restart` — correct for workers/schedulers where two
+ *   overlapping instances would double-process work.
  */
 export declare function buildSiteDeployScript(options: BuildSiteDeployScriptOptions): string[];
 export interface BuildStaticSiteDeployScriptOptions {

package/dist/drivers/shared/releases.d.ts

@@ -58,11 +58,19 @@ export declare function buildActivateRelease(paths: ReleasePaths): string[];
  * `to` set, points `current` at `releases/<to>`; otherwise picks the most recent
  * release that isn't the one `current` resolves to. Atomic (temp symlink + `mv
  * -T`), and a no-op-safe guard fails loudly if the target is missing rather than
- * leaving `current` dangling. The caller appends the engine reload
- * (php-fpm/queues) — see {@link import('./laravel-deploy')}.
+ * leaving `current` dangling.
+ *
+ * With `unitBase` set (e.g. `myapp-api`), the script also swaps the running
+ * systemd release instance for sites deployed zero-downtime style (templated
+ * `<unitBase>@<releaseId>` units pinned to their release dirs): it starts the
+ * instance for the rolled-back release — overlapping on the SO_REUSEPORT port —
+ * then stops the newer one, so even the rollback itself is zero-downtime. Sites
+ * on the legacy single unit just get a restart. The caller appends any engine
+ * reload (php-fpm/queues) — see {@link import('./laravel-deploy')}.
  */
 export declare function buildRollbackScript(paths: ReleasePaths, options?: {
     to?: string;
+    unitBase?: string;
 }): string[];
 /**
  * Remove all but the newest `keep` releases (by mtime). `current` always points

package/dist/index.js

@@ -55,7 +55,7 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "./chunk-x07dz3sd.js";
+} from "./chunk-6va72rhh.js";
 import {
   buildAndPushServerlessImage
 } from "./chunk-0wxyppza.js";
@@ -105,7 +105,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-xzn0ntr0.js";
+} from "./chunk-7pym4v5b.js";
 import {
   ABTestManager,
   AI,