@stacksjs/ts-cloud 0.7.76 → 0.7.78

package/dist/{chunk-ecsyc3p0.js → chunk-1qjyqrc5.js}

@@ -21983,6 +21983,8 @@ function isManagementDashboardSiteName(name) {
 function resolveManagementDashboardSites(config, environment, opts) {
   if (hasManagementDashboardSite(config))
     return [];
+  if (config.cloud?.attachTo)
+    return [];
   const auth2 = opts.password ? { auth: { username: opts.username || "admin", password: opts.password, realm: opts.realm } } : {};
   const build = opts.build === false || opts.build === undefined ? {} : { build: opts.build };
   if (opts.live !== false) {
@@ -21998,7 +22000,7 @@ function resolveManagementDashboardSites(config, environment, opts) {
       start: `bun ${DASHBOARD_ENTRY} dashboard:serve --box --host 127.0.0.1 --port ${port}`,
       port,
       env: {
-        TS_CLOUD_DASHBOARD_TELEMETRY: config.cloud?.attachTo ? "0" : "1"
+        TS_CLOUD_DASHBOARD_TELEMETRY: "1"
       },
       zeroDowntime: false,
       sharedPaths: [DASHBOARD_STATE_DIR],

package/dist/{chunk-wwv7rmmh.js → chunk-23pnrvex.js}

@@ -8,7 +8,7 @@ import {
   resolveProjectStackName,
   resolveStatePath,
   statePath
-} from "./chunk-ecsyc3p0.js";
+} from "./chunk-1qjyqrc5.js";
 import {
   EC2Client,
   SSMClient
@@ -5002,6 +5002,10 @@ function ensureManagementDashboard(config, options = {}) {
     logger.info("Management dashboard: skipped (TS_CLOUD_UI_DISABLE set).");
     return config;
   }
+  if (config.cloud?.attachTo) {
+    logger.info(`Management dashboard: ${config.project.slug} is attached to ${config.cloud.attachTo}; the server owner's dashboard monitors every attached project.`);
+    return config;
+  }
   if (hasManagementDashboardSite(config))
     return config;
   const environment = config.environments && Object.keys(config.environments)[0];
@@ -5751,18 +5755,22 @@ async function deploySiteRelease(driver, options, logger = noopLogger2) {
 function shellSingleQuote(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
-function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames) {
+function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, serverOwner = false) {
   const prefix = `${slug}-dashboard-`;
   const desiredUnits = desiredSiteNames.map((siteName) => `${slug}-${siteName}.service`);
   return [
     "set -euo pipefail",
     `TS_CLOUD_DASHBOARD_PREFIX=${shellSingleQuote(prefix)}`,
+    `TS_CLOUD_DASHBOARD_SERVER_OWNER=${serverOwner ? "1" : "0"}`,
     `TS_CLOUD_DASHBOARD_DESIRED=${shellSingleQuote(` ${desiredUnits.join(" ")} `)}`,
     "for TS_CLOUD_UNIT_FILE in /etc/systemd/system/*.service; do",
     '  [ -e "$TS_CLOUD_UNIT_FILE" ] || continue',
     '  TS_CLOUD_UNIT=$(basename "$TS_CLOUD_UNIT_FILE")',
     '  case "$TS_CLOUD_UNIT" in',
-    '    "$TS_CLOUD_DASHBOARD_PREFIX"*.service)',
+    "    *-dashboard-*.service)",
+    '      if [ "$TS_CLOUD_DASHBOARD_SERVER_OWNER" != 1 ]; then',
+    '        case "$TS_CLOUD_UNIT" in "$TS_CLOUD_DASHBOARD_PREFIX"*.service) ;; *) continue ;; esac',
+    "      fi",
     '      case "$TS_CLOUD_DASHBOARD_DESIRED" in',
     '        *" $TS_CLOUD_UNIT "*) ;;',
     "        *)",
@@ -5786,7 +5794,7 @@ async function reconcileManagementDashboardServices(driver, options, desiredSite
     return true;
   const result = await driver.runRemoteDeploy({
     targets,
-    commands: buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames),
+    commands: buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, !config.cloud?.attachTo),
     comment: `ts-cloud reconcile management dashboard ${slug}`,
     tags: {
       Project: slug,

package/dist/{chunk-28vh1h91.js → chunk-d2aw5vyv.js}

@@ -8,7 +8,7 @@ import {
   phpRuntimeLayerAssets,
   runPhpBuildHooks,
   sha256
-} from "./chunk-ecsyc3p0.js";
+} from "./chunk-1qjyqrc5.js";
 
 // src/deploy/serverless-image.ts
 import { execFileSync } from "node:child_process";

package/dist/{chunk-0pn5yzev.js → chunk-qk1qcsrh.js}

@@ -9,7 +9,7 @@ import {
   step,
   success,
   warn
-} from "./chunk-28vh1h91.js";
+} from "./chunk-d2aw5vyv.js";
 import {
   AwsBackupClient,
   CloudWatchLogsClient,
@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-wwv7rmmh.js";
+} from "./chunk-23pnrvex.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,
@@ -67,7 +67,7 @@ import {
   resolveStatePath,
   setStateDir,
   statePath
-} from "./chunk-ecsyc3p0.js";
+} from "./chunk-1qjyqrc5.js";
 import {
   SSMClient
 } from "./chunk-703nkybg.js";
@@ -3918,6 +3918,7 @@ class DurableQueueWorker {
   onResult;
   onError;
   waits = new Map;
+  nextWaitId = 0;
   lanes = [];
   running = false;
   unsubscribeAvailability;
@@ -3937,7 +3938,7 @@ class DurableQueueWorker {
       return this;
     this.running = true;
     this.unsubscribeAvailability = this.queue.onAvailable(() => this.wake());
-    this.lanes = Array.from({ length: this.parallelism }, () => this.runLane());
+    this.lanes = Array.from({ length: this.parallelism }, (_, index) => this.runLane(index));
     return this;
   }
   stop() {
@@ -3947,8 +3948,9 @@ class DurableQueueWorker {
     this.wake();
   }
   wake() {
-    for (const [timer, resolve] of this.waits) {
-      clearTimeout(timer);
+    for (const { resolve, timer } of this.waits.values()) {
+      if (timer)
+        clearTimeout(timer);
       resolve();
     }
     this.waits.clear();
@@ -3965,17 +3967,18 @@ class DurableQueueWorker {
         return results;
     }
   }
-  wait() {
+  wait(useFallbackPoll) {
     return new Promise((resolve) => {
-      const timer = setTimeout(() => {
-        this.waits.delete(timer);
+      const id = ++this.nextWaitId;
+      const timer = useFallbackPoll ? setTimeout(() => {
+        this.waits.delete(id);
         resolve();
-      }, this.pollIntervalMs);
-      timer.unref?.();
-      this.waits.set(timer, resolve);
+      }, this.pollIntervalMs) : undefined;
+      timer?.unref?.();
+      this.waits.set(id, { resolve, timer });
     });
   }
-  async runLane() {
+  async runLane(index) {
     while (this.running) {
       try {
         const result = await this.queue.runOne(this.handlers);
@@ -3983,12 +3986,13 @@ class DurableQueueWorker {
           break;
         if (result.handled) {
           this.onResult?.(result);
+          this.wake();
           continue;
         }
       } catch (error2) {
         this.onError?.(error2);
       }
-      await this.wait();
+      await this.wait(index === 0);
     }
   }
 }
@@ -8359,7 +8363,7 @@ async function deployServerlessApp(config, environment2, opts = {}) {
   }
   if (imageMode) {
     step("Building + pushing container image");
-    const { buildAndPushServerlessImage } = await import("./chunk-zcvdzvmz.js");
+    const { buildAndPushServerlessImage } = await import("./chunk-tq4v58zp.js");
     const built = await buildAndPushServerlessImage({
       app,
       projectRoot,
@@ -38427,8 +38431,9 @@ var PROBED_SERVICES = [
 var UNKNOWN = "-";
 function sharedBoxProbeScript(projectFilter) {
   const source = String.raw`
-import { basename, join } from 'node:path'
+import { X509Certificate } from 'node:crypto'
 import { existsSync, readdirSync, readFileSync, readlinkSync, statSync } from 'node:fs'
+import { basename, join } from 'node:path'
 
 const fragmentsRoot = '/etc/rpx/sites.d'
 const certsRoot = '/etc/rpx/certs'
@@ -38470,7 +38475,20 @@ if (existsSync(fragmentsRoot)) {
   }
 }
 
-const routes = await Promise.all(configuredRoutes.map(async route => {
+async function mapWithConcurrency(values, limit, mapper) {
+  const results = new Array(values.length)
+  let next = 0
+  const workers = Array.from({ length: Math.min(limit, values.length) }, async () => {
+    while (next < values.length) {
+      const index = next++
+      results[index] = await mapper(values[index])
+    }
+  })
+  await Promise.all(workers)
+  return results
+}
+
+const routes = await mapWithConcurrency(configuredRoutes, 8, async route => {
   const started = performance.now()
   let httpStatus = 0
   const probe = async (href) => {
@@ -38496,10 +38514,11 @@ const routes = await Promise.all(configuredRoutes.map(async route => {
   let tlsDaysRemaining
   const cert = join(certsRoot, route.domain + '.crt')
   if (existsSync(cert)) {
-    const result = Bun.spawnSync(['openssl', 'x509', '-in', cert, '-noout', '-enddate'])
-    const expiry = result.success ? result.stdout.toString().trim().replace(/^notAfter=/, '') : ''
-    const expiresAt = Date.parse(expiry)
-    if (Number.isFinite(expiresAt)) tlsDaysRemaining = Math.floor((expiresAt - Date.now()) / 86400000)
+    try {
+      const expiresAt = Date.parse(new X509Certificate(readFileSync(cert)).validTo)
+      if (Number.isFinite(expiresAt)) tlsDaysRemaining = Math.floor((expiresAt - Date.now()) / 86400000)
+    }
+    catch {}
   }
   let release
   let deployedAt
@@ -38522,7 +38541,7 @@ const routes = await Promise.all(configuredRoutes.map(async route => {
     release,
     deployedAt,
   }
-}))
+})
 for (const route of routes) console.log('DISCOVERED_SITE=' + Buffer.from(JSON.stringify(route)).toString('base64'))
 
 const serviceOutput = Bun.spawnSync([
@@ -38588,7 +38607,9 @@ EOF`,
   ];
   if (options.includeServices !== false)
     commands.push(`for s in ${PROBED_SERVICES.join(" ")}; do st=$(systemctl is-active "$s" 2>/dev/null); if [ -n "$st" ] && [ "$st" != "inactive" ] && [ "$st" != "unknown" ]; then mem=$(systemctl show "$s" -p MemoryCurrent --value 2>/dev/null); en=$(systemctl is-enabled "$s" 2>/dev/null); since=$(systemctl show "$s" -p ActiveEnterTimestamp --value 2>/dev/null); echo "SVC=$s=$st=$mem=$en=$since"; fi; done`);
-  commands.push(sharedBoxProbeScript(options.projectFilter), "true");
+  if (options.includeSites !== false)
+    commands.push(sharedBoxProbeScript(options.projectFilter));
+  commands.push("true");
   return commands;
 }
 function parseBlock(output) {
@@ -39260,6 +39281,7 @@ async function resolveServerDashboardData(config6, environment2, options = {}) {
           targets: [targets[0]],
           commands: metricsScript({
             includeServices: !options.telemetryOnly,
+            includeSites: options.includeSiteHealth !== false,
             projectFilter: config6.cloud?.attachTo ? config6.project.slug : undefined
           }),
           comment: `ts-cloud dashboard:build ${config6.project.slug}`,
@@ -42286,6 +42308,7 @@ async function collectNow(context) {
   const mode = resolveDeploymentMode(context.config);
   try {
     const data = (mode === "serverless" ? await resolveDashboardData(context.config, context.environment) : await resolveServerDashboardData(context.config, context.environment, {
+      includeSiteHealth: context.includeSiteHealth,
       telemetryOnly: context.lightweight
     })) ?? {};
     if (mode === "serverless") {
@@ -42901,6 +42924,9 @@ function selectedEnvironment(config6, requested) {
 function resolveDashboardEnvironment(available2, fallback, requested) {
   return requested && available2.includes(requested) ? requested : fallback;
 }
+function dashboardDataRefreshDue(lastRefreshedAt, now, minimumIntervalMs) {
+  return lastRefreshedAt == null || now - lastRefreshedAt >= minimumIntervalMs;
+}
 async function loadLocalEnv(cwd) {
   const candidates = [
     join13(here, "..", "..", "..", "..", ".env"),
@@ -43485,15 +43511,21 @@ async function startLocalDashboardServer(options = {}) {
   const configPath = resolveCloudConfigPath(cwd);
   const initialData = await resolveLiveDashboardData(config6, defaultEnvironment);
   const latestDataByEnvironment = new Map([[defaultEnvironment, initialData]]);
+  const latestDataRefreshedAtByEnvironment = new Map([[defaultEnvironment, Date.now()]]);
   const liveDataRefreshesByEnvironment = new Map;
+  const dashboardDataMinimumRefreshMs = Math.min(5 * 60000, Math.max(5000, Number(process.env.TS_CLOUD_DASHBOARD_REFRESH_MS) || 30000));
   const refreshLatestDashboardData = (environment2) => {
+    const previous = latestDataByEnvironment.get(environment2);
+    if (previous && !dashboardDataRefreshDue(latestDataRefreshedAtByEnvironment.get(environment2), Date.now(), dashboardDataMinimumRefreshMs))
+      return Promise.resolve(previous);
     const running = liveDataRefreshesByEnvironment.get(environment2);
     if (running)
       return running;
     const refresh = resolveLiveDashboardData(config6, environment2).then((data) => {
-      const previous = latestDataByEnvironment.get(environment2);
+      const previous2 = latestDataByEnvironment.get(environment2);
       latestDataByEnvironment.set(environment2, data);
-      if (previous?._serverReachable !== data._serverReachable || previous?._metricsStatus !== data._metricsStatus || (previous?.sitesDetail?.length ?? 0) !== (data.sitesDetail?.length ?? 0))
+      latestDataRefreshedAtByEnvironment.set(environment2, Date.now());
+      if (previous2?._serverReachable !== data._serverReachable || previous2?._metricsStatus !== data._metricsStatus || (previous2?.sitesDetail?.length ?? 0) !== (data.sitesDetail?.length ?? 0))
         clearUiCache();
       return data;
     }).finally(() => liveDataRefreshesByEnvironment.delete(environment2));
@@ -43505,11 +43537,16 @@ async function startLocalDashboardServer(options = {}) {
   const backgroundTelemetryEnabled = options.box && telemetryPreference !== "0" && (telemetryPreference === "1" || !config6.cloud?.attachTo);
   if (backgroundTelemetryEnabled) {
     let telemetryCollectionRunning = false;
+    let nextSiteHealthCollectionAt = 0;
     const collectHostHistory = async () => {
       if (telemetryCollectionRunning)
         return;
       telemetryCollectionRunning = true;
       try {
+        const now = Date.now();
+        const includeSiteHealth = now >= nextSiteHealthCollectionAt;
+        if (includeSiteHealth)
+          nextSiteHealthCollectionAt = now + 5 * 60000;
         const environmentRecord = controlPlane.environments.get(defaultEnvironment);
         await collectDashboardTelemetry({
           controlPlane: controlPlane.store,
@@ -43518,7 +43555,8 @@ async function startLocalDashboardServer(options = {}) {
           config: config6,
           environment: defaultEnvironment,
           force: true,
-          lightweight: true
+          lightweight: true,
+          includeSiteHealth
         });
       } catch (error2) {
         if (options.verbose)

package/dist/{chunk-zcvdzvmz.js → chunk-tq4v58zp.js}

@@ -1,8 +1,8 @@
 import {
   buildAndPushServerlessImage
-} from "./chunk-28vh1h91.js";
+} from "./chunk-d2aw5vyv.js";
 import"./chunk-50jpda9q.js";
-import"./chunk-ecsyc3p0.js";
+import"./chunk-1qjyqrc5.js";
 import"./chunk-zqtpg06c.js";
 import"./chunk-v0bahtg2.js";
 export {

package/dist/deploy/dashboard-data-server.d.ts

@@ -35,6 +35,12 @@ export interface DiscoveredSite {
     deployedAt?: string;
 }
 export declare function sharedBoxProbeScript(projectFilter?: string): string;
+/** Shell script that emits a parseable metrics block (no jq/printf-JSON needed). */
+export declare function metricsScript(options?: {
+    includeServices?: boolean;
+    includeSites?: boolean;
+    projectFilter?: string;
+}): string[];
 export declare function parseBlock(output: string): Record<string, string> & {
     services: ProbedService[];
     discoveredSites: DiscoveredSite[];
@@ -58,6 +64,7 @@ export declare function parseServerSecurity(output: string): Record<string, any>
 export declare function parseDeployHistory(output: string, sites?: Record<string, any>): Array<Record<string, any>>;
 export declare function resolveConfigOnlyServerDashboardData(config: CloudConfig, environment: EnvironmentType): Record<string, any>;
 export declare function resolveServerDashboardData(config: CloudConfig, environment: EnvironmentType, options?: {
+    includeSiteHealth?: boolean;
     telemetryOnly?: boolean;
 }): Promise<Record<string, any> | null>;
 export {};

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-0pn5yzev.js";
+} from "../chunk-qk1qcsrh.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -46,7 +46,7 @@ import {
 } from "../chunk-ef2dwfrg.js";
 import {
   buildAndPushServerlessImage
-} from "../chunk-28vh1h91.js";
+} from "../chunk-d2aw5vyv.js";
 import"../chunk-ybcz6sxc.js";
 import"../chunk-01d86gt1.js";
 import"../chunk-50jpda9q.js";
@@ -65,8 +65,8 @@ import {
   shipsARelease,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-wwv7rmmh.js";
-import"../chunk-ecsyc3p0.js";
+} from "../chunk-23pnrvex.js";
+import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";
 import"../chunk-hpv68b4a.js";

package/dist/deploy/local-dashboard-server.d.ts

@@ -45,6 +45,7 @@ export declare function dashboardMutationAuditPayload(method: string, path: stri
 };
 export declare function resolveOidcDashboardOrigin(host: string, port: number, env?: NodeJS.ProcessEnv): string | undefined;
 export declare function resolveDashboardEnvironment(available: readonly string[], fallback: EnvironmentType, requested?: string | null): EnvironmentType;
+export declare function dashboardDataRefreshDue(lastRefreshedAt: number | undefined, now: number, minimumIntervalMs: number): boolean;
 /** Reject browser cross-site mutations while retaining header-light CLI access. */
 export declare function isTrustedMutationRequest(req: Request): boolean;
 export declare function sanitizeCloudConfig(config: CloudConfig): Record<string, any>;

package/dist/deploy/telemetry-collection.d.ts

@@ -31,6 +31,8 @@ export interface TelemetryCollectionContext {
     force?: boolean;
     /** Collect host and site metrics without expensive runtime logs or inventory. */
     lightweight?: boolean;
+    /** Include route and TLS probes in lightweight host telemetry. */
+    includeSiteHealth?: boolean;
 }
 export declare function telemetryRecordsFromLog(input: {
     projectId: string;

package/dist/drivers/index.js

@@ -68,8 +68,8 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-wwv7rmmh.js";
-import"../chunk-ecsyc3p0.js";
+} from "../chunk-23pnrvex.js";
+import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";
 import"../chunk-wj3s95p9.js";

package/dist/drivers/shared/compute-deploy.d.ts

@@ -42,7 +42,7 @@ export interface DeployAllSitesOptions {
  * and can keep crash-looping on its old port. Release data and shared dashboard
  * state stay on disk for recovery.
  */
-export declare function buildManagementDashboardServiceReconciliationScript(slug: string, desiredSiteNames: string[]): string[];
+export declare function buildManagementDashboardServiceReconciliationScript(slug: string, desiredSiteNames: string[], serverOwner?: boolean): string[];
 /**
  * Deploy every site that targets the compute server — both dynamic apps
  * (`server` + `start`, run as systemd services) and static sites (`server`

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-0pn5yzev.js";
+} from "./chunk-qk1qcsrh.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -299,7 +299,7 @@ import {
 } from "./chunk-ef2dwfrg.js";
 import {
   buildAndPushServerlessImage
-} from "./chunk-28vh1h91.js";
+} from "./chunk-d2aw5vyv.js";
 import {
   ApplicationAutoScalingClient,
   BedrockClient,
@@ -398,7 +398,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-wwv7rmmh.js";
+} from "./chunk-23pnrvex.js";
 import {
   ABTestManager,
   AI,
@@ -812,7 +812,7 @@ import {
   withSecurity,
   withTimeout,
   xrayManager
-} from "./chunk-ecsyc3p0.js";
+} from "./chunk-1qjyqrc5.js";
 import {
   EC2Client,
   SSMClient

package/dist/queue/worker.d.ts

@@ -18,6 +18,7 @@ export declare class DurableQueueWorker {
     private readonly onResult?;
     private readonly onError?;
     private readonly waits;
+    private nextWaitId;
     private lanes;
     private running;
     private unsubscribeAvailability?;