@stacksjs/ts-cloud 0.7.80 → 0.7.82

package/dist/{chunk-5z0an6q8.js → chunk-900rezgt.js}

@@ -5757,9 +5757,46 @@ async function deploySiteRelease(driver, options, logger = noopLogger2) {
 function shellSingleQuote(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
-function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, serverOwner = false) {
+function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, serverOwner = false, desiredDomains = []) {
   const prefix = `${slug}-dashboard-`;
   const desiredUnits = desiredSiteNames.map((siteName) => `${slug}-${siteName}.service`);
+  const routeReconciliation = serverOwner ? [
+    `export TS_CLOUD_DASHBOARD_KEEP_DOMAINS=${shellSingleQuote(JSON.stringify(desiredDomains))}`,
+    "rm -f /run/ts-cloud-dashboard-routes-changed",
+    `/usr/local/bin/bun --bun -e ${shellSingleQuote(`
+          const { chmodSync, existsSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync } = require('node:fs')
+          const { basename, join } = require('node:path')
+          const root = '/etc/rpx/sites.d'
+          const keep = new Set(JSON.parse(process.env.TS_CLOUD_DASHBOARD_KEEP_DOMAINS || '[]'))
+          let changed = false
+          for (const name of existsSync(root) ? readdirSync(root) : []) {
+            if (!name.endsWith('.json')) continue
+            const file = join(root, name)
+            let config
+            try { config = JSON.parse(readFileSync(file, 'utf8')) } catch { continue }
+            if (!Array.isArray(config.proxies)) continue
+            const project = basename(name, '.json')
+            const proxies = config.proxies.filter((route) => {
+              const domain = typeof route?.to === 'string' ? route.to.toLowerCase() : ''
+              if (!/^(?:dashboard|cloud)\\./.test(domain) || keep.has(domain)) return true
+              const siteName = domain.replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '')
+              return !existsSync('/var/www/' + project + '-' + siteName)
+            })
+            if (proxies.length === config.proxies.length) continue
+            const temporary = file + '.tmp-' + process.pid
+            const mode = statSync(file).mode & 0o777
+            writeFileSync(temporary, JSON.stringify({ ...config, proxies }, null, 2) + '\\n', { mode })
+            chmodSync(temporary, mode)
+            renameSync(temporary, file)
+            changed = true
+          }
+          if (changed) writeFileSync('/run/ts-cloud-dashboard-routes-changed', '')
+        `)}`,
+    "if [ -e /run/ts-cloud-dashboard-routes-changed ]; then",
+    "  systemctl restart rpx-gateway.service",
+    "  rm -f /run/ts-cloud-dashboard-routes-changed",
+    "fi"
+  ] : [];
   return [
     "set -euo pipefail",
     `TS_CLOUD_DASHBOARD_PREFIX=${shellSingleQuote(prefix)}`,
@@ -5784,7 +5821,8 @@ function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNa
     "  esac",
     "done",
     "systemctl daemon-reload",
-    "systemctl reset-failed"
+    "systemctl reset-failed",
+    ...routeReconciliation
   ];
 }
 async function reconcileManagementDashboardServices(driver, options, desiredSiteNames, logger) {
@@ -5796,7 +5834,7 @@ async function reconcileManagementDashboardServices(driver, options, desiredSite
     return true;
   const result = await driver.runRemoteDeploy({
     targets,
-    commands: buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, !config.cloud?.attachTo),
+    commands: buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, !config.cloud?.attachTo, desiredSiteNames.map((siteName) => config.sites?.[siteName]?.domain).filter((domain) => typeof domain === "string")),
     comment: `ts-cloud reconcile management dashboard ${slug}`,
     tags: {
       Project: slug,

package/dist/{chunk-cx2j9h3s.js → chunk-hq03wq2p.js}

@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-5z0an6q8.js";
+} from "./chunk-900rezgt.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,
@@ -40169,7 +40169,7 @@ function isValidUsername(value2) {
   return /^[a-z0-9][a-z0-9._-]{1,31}$/i.test(value2);
 }
 function normalizeUser(raw) {
-  if (!raw || typeof raw.username !== "string" || typeof raw.passwordHash !== "string")
+  if (!raw || typeof raw.username !== "string" || !isValidUsername(raw.username) || typeof raw.passwordHash !== "string")
     return null;
   const role = raw.role === "admin" ? "admin" : "member";
   const sites = {};

package/dist/deploy/dashboard-users.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-cx2j9h3s.js";
+} from "../chunk-hq03wq2p.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -65,7 +65,7 @@ import {
   shipsARelease,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-5z0an6q8.js";
+} from "../chunk-900rezgt.js";
 import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/index.js

@@ -68,7 +68,7 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-5z0an6q8.js";
+} from "../chunk-900rezgt.js";
 import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/shared/compute-deploy.d.ts

@@ -42,7 +42,7 @@ export interface DeployAllSitesOptions {
  * and can keep crash-looping on its old port. Release data and shared dashboard
  * state stay on disk for recovery.
  */
-export declare function buildManagementDashboardServiceReconciliationScript(slug: string, desiredSiteNames: string[], serverOwner?: boolean): string[];
+export declare function buildManagementDashboardServiceReconciliationScript(slug: string, desiredSiteNames: string[], serverOwner?: boolean, desiredDomains?: string[]): string[];
 /**
  * Deploy every site that targets the compute server — both dynamic apps
  * (`server` + `start`, run as systemd services) and static sites (`server`

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-cx2j9h3s.js";
+} from "./chunk-hq03wq2p.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -398,7 +398,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-5z0an6q8.js";
+} from "./chunk-900rezgt.js";
 import {
   ABTestManager,
   AI,