@stacksjs/ts-cloud 0.7.91 → 0.7.93

package/dist/{chunk-3scf213a.js → chunk-fbwcv2vf.js}

@@ -1347,6 +1347,35 @@ function writeFileHeredoc(path, content, delimiter, mode = "0644") {
     `chmod ${mode} ${path}`
   ];
 }
+function shellSingleQuote(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function writeRpxFragment(path, content, delimiter, options) {
+  if (!options.preserveManagementDashboardRoutes)
+    return writeFileHeredoc(path, content, delimiter, "0600");
+  const mergeScript = `
+const { readFileSync, writeFileSync } = require('node:fs')
+const currentPath = process.env.TS_CLOUD_RPX_CURRENT_FRAGMENT
+const candidatePath = process.env.TS_CLOUD_RPX_CANDIDATE_FRAGMENT
+const isDashboard = route => /^(?:dashboard|cloud)\\./i.test(String(route?.to || ''))
+const current = JSON.parse(readFileSync(currentPath, 'utf8'))
+const candidate = JSON.parse(readFileSync(candidatePath, 'utf8'))
+const retained = Array.isArray(current.proxies) ? current.proxies.filter(isDashboard) : []
+const next = Array.isArray(candidate.proxies) ? candidate.proxies.filter(route => !isDashboard(route)) : []
+candidate.proxies = [...next, ...retained]
+writeFileSync(candidatePath, JSON.stringify(candidate, null, 2) + '\\n', { mode: 0o600 })
+`.trim();
+  return [
+    `__tsc_fragment_candidate="$(mktemp "${path}.candidate.XXXXXX")"`,
+    `cat > "$__tsc_fragment_candidate" <<'${delimiter}'`,
+    content,
+    delimiter,
+    'chmod 0600 "$__tsc_fragment_candidate"',
+    `if [ -f ${path} ]; then TS_CLOUD_RPX_CURRENT_FRAGMENT=${path} TS_CLOUD_RPX_CANDIDATE_FRAGMENT="$__tsc_fragment_candidate" ${options.bunBin} -e ${shellSingleQuote(mergeScript)}; fi`,
+    `mv -f "$__tsc_fragment_candidate" ${path}`,
+    `chmod 0600 ${path}`
+  ];
+}
 function rpxCertRenewServiceName(slug) {
   const safeSlug = (slug || "app").replace(/[^a-z0-9._-]+/gi, "-");
   return `rpx-cert-renew-${safeSlug}.service`;
@@ -1459,7 +1488,10 @@ function buildRpxProvisionScript(options) {
     `mv ${RPX_INSTALL_DIR}.next ${RPX_INSTALL_DIR}`,
     `rm -rf ${RPX_INSTALL_DIR}.prev`,
     `ln -sfn ${RPX_INSTALL_DIR}/node_modules ${RPX_DIR}/node_modules`,
-    ...writeFileHeredoc(`${RPX_SITES_DIR}/${slug}.json`, fragment, "TS_CLOUD_RPX_FRAGMENT_EOF", "0600"),
+    ...writeRpxFragment(`${RPX_SITES_DIR}/${slug}.json`, fragment, "TS_CLOUD_RPX_FRAGMENT_EOF", {
+      bunBin,
+      preserveManagementDashboardRoutes: options.preserveManagementDashboardRoutes
+    }),
     ...writeFileHeredoc(RPX_LAUNCHER_PATH, assembler, "TS_CLOUD_RPX_EOF"),
     `${bunBin} build --production --compile --outfile ${RPX_BINARY_PATH}.next ${RPX_LAUNCHER_PATH}`,
     `chmod 0755 ${RPX_BINARY_PATH}.next`,
@@ -1508,7 +1540,10 @@ function buildRpxFragmentRefreshScript(options) {
   return [
     "set -euo pipefail",
     `mkdir -p ${RPX_SITES_DIR}`,
-    ...writeFileHeredoc(`${RPX_SITES_DIR}/${slug}.json`, fragment, "TS_CLOUD_RPX_FRAGMENT_EOF", "0600"),
+    ...writeRpxFragment(`${RPX_SITES_DIR}/${slug}.json`, fragment, "TS_CLOUD_RPX_FRAGMENT_EOF", {
+      bunBin: "/usr/local/bin/bun",
+      preserveManagementDashboardRoutes: options.preserveManagementDashboardRoutes
+    }),
     `systemctl restart ${RPX_SERVICE_NAME}`
   ];
 }
@@ -5909,16 +5944,16 @@ async function deploySiteRelease(driver, options, logger = noopLogger2) {
     perInstance: result.perInstance
   };
 }
-function shellSingleQuote(value) {
+function shellSingleQuote2(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
 function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNames, serverOwner = false, desiredDomains = []) {
   const prefix = `${slug}-dashboard-`;
   const desiredUnits = desiredSiteNames.map((siteName) => `${slug}-${siteName}.service`);
   const routeReconciliation = serverOwner ? [
-    `export TS_CLOUD_DASHBOARD_KEEP_DOMAINS=${shellSingleQuote(JSON.stringify(desiredDomains))}`,
+    `export TS_CLOUD_DASHBOARD_KEEP_DOMAINS=${shellSingleQuote2(JSON.stringify(desiredDomains))}`,
     "rm -f /run/ts-cloud-dashboard-routes-changed",
-    `/usr/local/bin/bun --bun -e ${shellSingleQuote(`
+    `/usr/local/bin/bun --bun -e ${shellSingleQuote2(`
           const { chmodSync, existsSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync } = require('node:fs')
           const { basename, join } = require('node:path')
           const root = '/etc/rpx/sites.d'
@@ -5954,9 +5989,9 @@ function buildManagementDashboardServiceReconciliationScript(slug, desiredSiteNa
   ] : [];
   return [
     "set -euo pipefail",
-    `TS_CLOUD_DASHBOARD_PREFIX=${shellSingleQuote(prefix)}`,
+    `TS_CLOUD_DASHBOARD_PREFIX=${shellSingleQuote2(prefix)}`,
     `TS_CLOUD_DASHBOARD_SERVER_OWNER=${serverOwner ? "1" : "0"}`,
-    `TS_CLOUD_DASHBOARD_DESIRED=${shellSingleQuote(` ${desiredUnits.join(" ")} `)}`,
+    `TS_CLOUD_DASHBOARD_DESIRED=${shellSingleQuote2(` ${desiredUnits.join(" ")} `)}`,
     "for TS_CLOUD_UNIT_FILE in /etc/systemd/system/*.service; do",
     '  [ -e "$TS_CLOUD_UNIT_FILE" ] || continue',
     '  TS_CLOUD_UNIT=$(basename "$TS_CLOUD_UNIT_FILE")',
@@ -6169,7 +6204,11 @@ async function reloadRpxGateway(options) {
     logger.step(`Reloading the load balancer's rpx gateway with ${lbConfig.proxies.length} route(s)...`);
     const result2 = await driver.runRemoteDeploy({
       targets: lbTargets,
-      commands: buildRpxFragmentRefreshScript({ config: lbConfig, slug }),
+      commands: buildRpxFragmentRefreshScript({
+        config: lbConfig,
+        slug,
+        preserveManagementDashboardRoutes: options.managementDashboard === false
+      }),
       comment: `ts-cloud rpx gateway reload ${slug}`,
       tags: {
         Project: slug,
@@ -6200,7 +6239,12 @@ async function reloadRpxGateway(options) {
     return true;
   }
   logger.step(`Reloading rpx gateway with ${rpxConfig.proxies.length} route(s)...`);
-  const script = buildRpxProvisionScript({ proxy, config: rpxConfig, slug });
+  const script = buildRpxProvisionScript({
+    proxy,
+    config: rpxConfig,
+    slug,
+    preserveManagementDashboardRoutes: options.managementDashboard === false
+  });
   const result = await driver.runRemoteDeploy({
     targets,
     commands: script,

package/dist/{chunk-j1kkmmrz.js → chunk-y5wrqyyz.js}

@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-3scf213a.js";
+} from "./chunk-fbwcv2vf.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,
@@ -92,7 +92,7 @@ import {
 import { createHash as createHash5 } from "node:crypto";
 
 // src/control-plane/migrations.ts
-var CONTROL_PLANE_SCHEMA_VERSION = 35;
+var CONTROL_PLANE_SCHEMA_VERSION = 36;
 var controlPlaneMigrations = [
   {
     version: 1,
@@ -1506,11 +1506,56 @@ var controlPlaneMigrations = [
     CREATE INDEX cleanup_plan_status ON cleanup_plans(project_id,status,expires_at);
     CREATE INDEX dr_drill_status ON disaster_recovery_drills(project_id,status,created_at DESC);
   `
+  },
+  {
+    version: 36,
+    name: "telemetry_source_rollups",
+    sql: `
+      CREATE TABLE telemetry_source_rollups (
+        project_id TEXT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+        environment_id TEXT NOT NULL DEFAULT '',
+        resource_id TEXT NOT NULL DEFAULT '',
+        source TEXT NOT NULL,
+        first_observed_at TEXT NOT NULL,
+        latest_observed_at TEXT NOT NULL,
+        ingested_bytes INTEGER NOT NULL DEFAULT 0 CHECK (ingested_bytes >= 0),
+        record_count INTEGER NOT NULL DEFAULT 0 CHECK (record_count >= 0),
+        PRIMARY KEY(project_id, environment_id, resource_id, source)
+      ) STRICT;
+
+      INSERT INTO telemetry_source_rollups (
+        project_id, environment_id, resource_id, source,
+        first_observed_at, latest_observed_at, ingested_bytes, record_count
+      )
+      SELECT
+        project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source,
+        MIN(observed_at), MAX(observed_at), SUM(ingested_bytes), COUNT(*)
+      FROM telemetry_records
+      GROUP BY project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source;
+
+      CREATE TRIGGER telemetry_source_rollups_insert
+      AFTER INSERT ON telemetry_records
+      BEGIN
+        INSERT INTO telemetry_source_rollups (
+          project_id, environment_id, resource_id, source,
+          first_observed_at, latest_observed_at, ingested_bytes, record_count
+        )
+        VALUES (
+          NEW.project_id, COALESCE(NEW.environment_id, ''), COALESCE(NEW.resource_id, ''), NEW.source,
+          NEW.observed_at, NEW.observed_at, NEW.ingested_bytes, 1
+        )
+        ON CONFLICT(project_id, environment_id, resource_id, source) DO UPDATE SET
+          first_observed_at = MIN(first_observed_at, excluded.first_observed_at),
+          latest_observed_at = MAX(latest_observed_at, excluded.latest_observed_at),
+          ingested_bytes = ingested_bytes + excluded.ingested_bytes,
+          record_count = record_count + 1;
+      END;
+    `
   }
 ];
 // src/control-plane/store.ts
 import { createHash, randomBytes } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, statSync } from "node:fs";
 import { dirname } from "node:path";
 import { Database } from "bun:sqlite";
 
@@ -1978,6 +2023,12 @@ class ControlPlaneStore {
       } catch {}
     }
   }
+  backupTo(path) {
+    this.database.run("VACUUM INTO ?", [path]);
+    try {
+      chmodSync(path, 384);
+    } catch {}
+  }
   migrate() {
     const row = this.database.query("PRAGMA user_version").get();
     const current = Number(row?.user_version ?? 0);
@@ -1988,7 +2039,7 @@ class ControlPlaneStore {
     let backupPath;
     if (current > 0 && this.path !== ":memory:") {
       backupPath = `${this.path}.v${current}.${Date.now()}.bak`;
-      writeFileSync(backupPath, this.database.serialize(), { mode: 384 });
+      this.backupTo(backupPath);
     }
     try {
       const apply = this.database.transaction(() => {
@@ -2263,7 +2314,7 @@ class ControlPlaneStore {
     return row ? mapMembership(row) : undefined;
   }
   listMemberships(organizationId, options = {}) {
-    const revoked = options.includeRevoked ? "" : "AND status = 'active'";
+    const revoked = options.includeRevoked ? "" : `AND status = 'active'`;
     return this.database.query(`SELECT * FROM organization_memberships WHERE organization_id = ? ${revoked} ORDER BY created_at, id`).all(organizationId).map(mapMembership);
   }
   updateMembership(input) {
@@ -2314,7 +2365,7 @@ class ControlPlaneStore {
     return membership;
   }
   assertAnotherOwner(current) {
-    const owners = Number(this.database.query("SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'").get(current.organizationId, "active")?.count ?? 0);
+    const owners = Number(this.database.query(`SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'`).get(current.organizationId, "active")?.count ?? 0);
     if (owners <= 1)
       throw new Error("Cannot remove or demote the last organization owner");
   }
@@ -2873,7 +2924,7 @@ class ControlPlaneStore {
     if (this.path === ":memory:")
       throw new Error("Cannot create a filesystem backup for an in-memory control plane");
     const backupPath = `${this.path}.${Date.now()}.bak`;
-    writeFileSync(backupPath, this.database.serialize(), { mode: 384 });
+    this.backupTo(backupPath);
     this.setSetting("storage.last_backup", { path: backupPath, createdAt: this.now(), reason });
     return backupPath;
   }
@@ -7990,7 +8041,7 @@ function estimateExistingStaticFullStackMonthlyCost(options = {}) {
 // src/deploy/container-image.ts
 import { execFileSync } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, mkdtempSync, readdirSync, readFileSync, rmSync, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, mkdtempSync, readdirSync, readFileSync, rmSync, statSync as statSync2, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { basename as basename2, join as join3, relative, resolve as resolve2 } from "node:path";
 var IGNORED_DIRECTORIES = new Set([".git", "node_modules", "dist", "coverage"]);
@@ -8093,7 +8144,7 @@ async function buildAndPushContainerImage(options, injected) {
     const registry = auth.proxyEndpoint.replace(/^https?:\/\//, "");
     const dockerConfig = join3(temporaryDirectory, "docker");
     mkdirSync2(dockerConfig, { recursive: true });
-    writeFileSync2(join3(dockerConfig, "config.json"), JSON.stringify({ auths: { [registry]: { auth: auth.authorizationToken } } }), { mode: 384 });
+    writeFileSync(join3(dockerConfig, "config.json"), JSON.stringify({ auths: { [registry]: { auth: auth.authorizationToken } } }), { mode: 384 });
     dependencies2.run("docker", ["push", imageUri], { env: { ...process.env, DOCKER_CONFIG: dockerConfig } });
   } finally {
     rmSync(temporaryDirectory, { recursive: true, force: true });
@@ -10895,9 +10946,11 @@ class TelemetryStore {
     if (environmentId)
       bindings.push(environmentId);
     const boundedResources = [...new Set(resourceIds ?? [])].slice(0, 100);
+    if (resourceIds && boundedResources.length === 0)
+      return [];
     const resources = resourceIds ? ` AND resource_id IN (${boundedResources.map(() => "?").join(",") || "''"})` : "";
     bindings.push(...boundedResources);
-    const rows = this.controlPlane.database.query(`SELECT source, MAX(observed_at) latest, SUM(ingested_bytes) bytes, COUNT(*) count, MIN(observed_at) first FROM telemetry_records WHERE project_id=?${environment2}${resources} GROUP BY source`).all(...bindings);
+    const rows = this.controlPlane.database.query(`SELECT source, MAX(latest_observed_at) latest, SUM(ingested_bytes) bytes, SUM(record_count) count, MIN(first_observed_at) first FROM telemetry_source_rollups WHERE project_id=?${environment2}${resources} GROUP BY source`).all(...bindings);
     const now = this.now().getTime();
     return rows.map((row) => {
       const latest = String(row.latest);
@@ -11016,8 +11069,26 @@ class TelemetryStore {
     const excess = Number(this.controlPlane.database.query(`SELECT MAX(0, COUNT(*)-?) excess FROM telemetry_records${projectId ? " WHERE project_id=?" : ""}`).get(policy.maxRecords, ...projectId ? [projectId] : [])?.excess ?? 0);
     if (excess > 0)
       this.controlPlane.database.run(`DELETE FROM telemetry_records WHERE id IN (SELECT id FROM telemetry_records${projectId ? " WHERE project_id=?" : ""} ORDER BY timestamp ASC LIMIT ?)`, projectId ? [projectId, excess] : [excess]);
+    this.rebuildStatusRollups(projectId);
     return { deleted: removed + excess, ...downsampled };
   }
+  rebuildStatusRollups(projectId) {
+    const scope = projectId ? " WHERE project_id=?" : "";
+    const bindings = projectId ? [projectId] : [];
+    const rebuild = this.controlPlane.database.transaction(() => {
+      this.controlPlane.database.run(`DELETE FROM telemetry_source_rollups${scope}`, bindings);
+      this.controlPlane.database.run(`INSERT INTO telemetry_source_rollups (
+          project_id, environment_id, resource_id, source,
+          first_observed_at, latest_observed_at, ingested_bytes, record_count
+        )
+        SELECT
+          project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source,
+          MIN(observed_at), MAX(observed_at), SUM(ingested_bytes), COUNT(*)
+        FROM telemetry_records${scope}
+        GROUP BY project_id, COALESCE(environment_id, ''), COALESCE(resource_id, ''), source`, bindings);
+    });
+    rebuild();
+  }
 }
 // src/alerts/telemetry.ts
 function evaluateTelemetryAlertRules(store4, projectId, environmentId, now = new Date) {
@@ -12075,7 +12146,7 @@ async function manifestRequest(fetchFn, root, image, token, signal, authorizatio
 }
 // src/onboarding/artifact-store.ts
 import { createHash as createHash12 } from "node:crypto";
-import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, renameSync, unlinkSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { basename as basename3, join as join5 } from "node:path";
 function map2(row) {
   return {
@@ -12122,7 +12193,7 @@ class ApplicationArtifactStore {
     const path = join5(this.root, `${id}.archive`);
     const temporary = `${path}.partial`;
     try {
-      writeFileSync3(temporary, input.bytes, { mode: 384, flag: "wx" });
+      writeFileSync2(temporary, input.bytes, { mode: 384, flag: "wx" });
       renameSync(temporary, path);
       chmodSync2(path, 384);
       this.controlPlane.database.run("INSERT INTO application_artifacts (id, organization_id, project_id, filename, storage_path, sha256, size, format, entry_count, expanded_bytes, created_by_actor_id, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)", [
@@ -14755,7 +14826,7 @@ function webhookEndpoint(baseUrl, webhook) {
   return new URL(`/api/source/webhooks/${encodeURIComponent(webhook.endpointToken)}`, base).href;
 }
 // src/source/git-workspace.ts
-import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { chmodSync as chmodSync3, mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join6, resolve as resolve5 } from "node:path";
 function validateRemote(value, deployKey) {
@@ -14802,8 +14873,8 @@ function transportEnvironment(options) {
     directory = mkdtempSync2(join6(tmpdir2(), "ts-cloud-git-transport-"));
     const keyPath = join6(directory, "key");
     const knownHostsPath = join6(directory, "known_hosts");
-    writeFileSync4(keyPath, options.deployKey.privateKey, { mode: 384 });
-    writeFileSync4(knownHostsPath, `${options.deployKey.host} ${options.deployKey.hostKey}
+    writeFileSync3(keyPath, options.deployKey.privateKey, { mode: 384 });
+    writeFileSync3(knownHostsPath, `${options.deployKey.host} ${options.deployKey.hostKey}
 `, { mode: 384 });
     chmodSync3(keyPath, 384);
     chmodSync3(knownHostsPath, 384);
@@ -18280,7 +18351,7 @@ async function sendAuthenticationEmail(config, message) {
 }
 // src/auth/encryption.ts
 import { randomBytes as randomBytes6 } from "node:crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { chmodSync as chmodSync4, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 function authEncryptionKeyFile() {
   return statePath("auth-encryption-key");
@@ -18300,7 +18371,7 @@ function resolveAuthEncryptionKey(cwd) {
   const key = randomBytes6(32).toString("base64url");
   try {
     mkdirSync4(dirname2(file), { recursive: true, mode: 448 });
-    writeFileSync5(file, `${key}
+    writeFileSync4(file, `${key}
 `, { mode: 384 });
     chmodSync4(file, 384);
   } catch {}
@@ -23027,7 +23098,7 @@ import { homedir as homedir3 } from "os";
 import { dirname as dirname4, resolve as resolve12 } from "path";
 import process20 from "process";
 import { existsSync as existsSync22, statSync as statSync22 } from "fs";
-import { existsSync as existsSync82, mkdirSync as mkdirSync32, readdirSync as readdirSync32, writeFileSync as writeFileSync52 } from "fs";
+import { existsSync as existsSync82, mkdirSync as mkdirSync32, readdirSync as readdirSync32, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname3, resolve as resolve72 } from "path";
 import process12 from "process";
@@ -28162,7 +28233,7 @@ function generateConfigTypes(options) {
   const content = `// Generated by bunfig v${version}
 export type ConfigNames = ${files.length ? `'${files.join("' | '")}'` : "string"}
 `;
-  writeFileSync52(outputFile, content, { mode: 438 });
+  writeFileSync5(outputFile, content, { mode: 438 });
 }
 function createLibraryConfig(options) {
   let configCache = null;
@@ -40133,7 +40204,7 @@ function clearSessionCookie(options = { secure: true }) {
 }
 
 // src/deploy/dashboard-users.ts
-import { chmodSync as chmodSync6, existsSync as existsSync19, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync19, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "node:fs";
 import { dirname as dirname8 } from "node:path";
 function usersFile() {
   return statePath("dashboard-users.json");
@@ -40188,7 +40259,7 @@ function loadUsers(cwd) {
 function saveUsers(cwd, users) {
   const file = usersFilePath(cwd);
   mkdirSync7(dirname8(file), { recursive: true });
-  writeFileSync10(file, `${JSON.stringify({ users }, null, 2)}
+  writeFileSync9(file, `${JSON.stringify({ users }, null, 2)}
 `);
   chmodSync6(file, 384);
 }

package/dist/control-plane/store.d.ts

@@ -13,6 +13,7 @@ export declare class ControlPlaneStore {
     constructor(options?: ControlPlaneStoreOptions);
     private now;
     private secureDatabaseFiles;
+    private backupTo;
     private migrate;
     close(): void;
     transaction<T>(callback: () => T): T;

package/dist/deploy/index.js

@@ -30,7 +30,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-j1kkmmrz.js";
+} from "../chunk-y5wrqyyz.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -70,7 +70,7 @@ import {
   siteInstallBase,
   validateDeploymentConfig,
   verifyAddressRecord
-} from "../chunk-3scf213a.js";
+} from "../chunk-fbwcv2vf.js";
 import"../chunk-hmehkeqx.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/index.js

@@ -68,7 +68,7 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-3scf213a.js";
+} from "../chunk-fbwcv2vf.js";
 import"../chunk-hmehkeqx.js";
 import"../chunk-7m60qnc8.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -272,6 +272,8 @@ export interface BuildRpxProvisionOptions {
     slug?: string;
     /** Absolute path to the `bun` binary on the box. @default '/usr/local/bin/bun' */
     bunBin?: string;
+    /** Keep the dashboard route currently running on the box during an app-only deploy. */
+    preserveManagementDashboardRoutes?: boolean;
 }
 export declare const RPX_CERT_RENEW_SCRIPT = "/etc/rpx/renew-certs.sh";
 export declare const RPX_CERT_RENEW_SERVICE = "rpx-cert-renew.service";
@@ -310,6 +312,8 @@ export interface BuildRpxFragmentRefreshOptions {
      * Defaults to `'app'`.
      */
     slug?: string;
+    /** Keep the dashboard route currently running on the box during an app-only deploy. */
+    preserveManagementDashboardRoutes?: boolean;
 }
 /**
  * Build the shell commands that rewrite ONLY this app's rpx route fragment

package/dist/index.js

@@ -283,7 +283,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-j1kkmmrz.js";
+} from "./chunk-y5wrqyyz.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -403,7 +403,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-3scf213a.js";
+} from "./chunk-fbwcv2vf.js";
 import {
   ABTestManager,
   AI,

package/dist/telemetry/store.d.ts

@@ -31,4 +31,5 @@ export declare class TelemetryStore {
         compacted: number;
         rollups: number;
     };
+    private rebuildStatusRollups;
 }