@stacksjs/ts-cloud 0.9.2 → 0.9.4

package/dist/chunk-xt3s24vr.js

@@ -0,0 +1,2 @@
+import{createRequire as a}from"node:module";var c=a(import.meta.url);
+export{c as qt};

package/dist/chunk-y21zk0pn.js

@@ -0,0 +1,4 @@
+import{Th as V}from"./chunk-0ccta6z6.js";class Y{client;region;constructor(q="us-east-1"){this.region=q,this.client=new V}async describeInstances(q){let z={Action:"DescribeInstances",Version:"2016-11-15"};if(q?.InstanceIds)q.InstanceIds.forEach((J,K)=>{z[`InstanceId.${K+1}`]=J});if(q?.Filters)q.Filters.forEach((J,K)=>{z[`Filter.${K+1}.Name`]=J.Name,J.Values.forEach((L,M)=>{z[`Filter.${K+1}.Value.${M+1}`]=L})});if(q?.MaxResults)z.MaxResults=String(q.MaxResults);if(q?.NextToken)z.NextToken=q.NextToken;let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=H.DescribeInstancesResponse||H;return{Reservations:this.parseReservations(G.reservationSet?.item),NextToken:G.nextToken}}async getInstance(q){return(await this.describeInstances({InstanceIds:[q]})).Reservations?.[0]?.Instances?.[0]}async getConsoleOutput(q,z){let H={Action:"GetConsoleOutput",Version:"2016-11-15",InstanceId:q};if(z)H.Latest="true";let G=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()}),J=G.GetConsoleOutputResponse||G;return{InstanceId:J.instanceId,Output:J.output,Timestamp:J.timestamp}}async getConsoleOutputDecoded(q,z){let H=await this.getConsoleOutput(q,z?.latest);if(!H.Output)return"No console output available yet";let G=Buffer.from(H.Output,"base64").toString("utf-8");if(z?.tailLines)return G.split(`
+`).slice(-z.tailLines).join(`
+`);return G}async describeInstanceStatus(q){let z={Action:"DescribeInstanceStatus",Version:"2016-11-15"};if(q?.InstanceIds)q.InstanceIds.forEach((G,J)=>{z[`InstanceId.${J+1}`]=G});if(q?.IncludeAllInstances)z.IncludeAllInstances="true";if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{InstanceStatuses:this.parseArray(H.instanceStatusSet?.item).map((G)=>({InstanceId:G.instanceId,InstanceState:G.instanceState?{Code:Number.parseInt(G.instanceState.code),Name:G.instanceState.name}:void 0,InstanceStatus:G.instanceStatus?{Status:G.instanceStatus.status,Details:this.parseArray(G.instanceStatus.details?.item).map((J)=>({Name:J.name,Status:J.status}))}:void 0,SystemStatus:G.systemStatus?{Status:G.systemStatus.status,Details:this.parseArray(G.systemStatus.details?.item).map((J)=>({Name:J.name,Status:J.status}))}:void 0}))}}async startInstances(q){let z={Action:"StartInstances",Version:"2016-11-15"};q.forEach((G,J)=>{z[`InstanceId.${J+1}`]=G});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{StartingInstances:this.parseArray(H.instancesSet?.item).map((G)=>({InstanceId:G.instanceId,CurrentState:G.currentState?{Name:G.currentState.name}:void 0,PreviousState:G.previousState?{Name:G.previousState.name}:void 0}))}}async stopInstances(q,z){let H={Action:"StopInstances",Version:"2016-11-15"};if(q.forEach((J,K)=>{H[`InstanceId.${K+1}`]=J}),z)H.Force="true";let G=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()});return{StoppingInstances:this.parseArray(G.instancesSet?.item).map((J)=>({InstanceId:J.instanceId,CurrentState:J.currentState?{Name:J.currentState.name}:void 0,PreviousState:J.previousState?{Name:J.previousState.name}:void 0}))}}async rebootInstances(q){let z={Action:"RebootInstances",Version:"2016-11-15"};q.forEach((H,G)=>{z[`InstanceId.${G+1}`]=H}),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async terminateInstances(q){let z={Action:"TerminateInstances",Version:"2016-11-15"};q.forEach((G,J)=>{z[`InstanceId.${J+1}`]=G});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{TerminatingInstances:this.parseArray(H.instancesSet?.item).map((G)=>({InstanceId:G.instanceId,CurrentState:G.currentState?{Name:G.currentState.name}:void 0,PreviousState:G.previousState?{Name:G.previousState.name}:void 0}))}}async createImage(q){let z={Action:"CreateImage",Version:"2016-11-15",InstanceId:q.InstanceId,Name:q.Name};if(q.Description)z.Description=q.Description;if(q.NoReboot!==void 0)z.NoReboot=String(q.NoReboot);if(q.TagSpecifications)q.TagSpecifications.forEach((J,K)=>{z[`TagSpecification.${K+1}.ResourceType`]=J.ResourceType,J.Tags.forEach((L,M)=>{z[`TagSpecification.${K+1}.Tag.${M+1}.Key`]=L.Key,z[`TagSpecification.${K+1}.Tag.${M+1}.Value`]=L.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{ImageId:(H.CreateImageResponse||H).imageId}}async deregisterImage(q){await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({Action:"DeregisterImage",Version:"2016-11-15",ImageId:q}).toString()})}async describeVpcs(q){let z={Action:"DescribeVpcs",Version:"2016-11-15"};if(q?.VpcIds)q.VpcIds.forEach((G,J)=>{z[`VpcId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Vpcs:this.parseArray(H.vpcSet?.item).map((G)=>({VpcId:G.vpcId,CidrBlock:G.cidrBlock,State:G.state,DhcpOptionsId:G.dhcpOptionsId,InstanceTenancy:G.instanceTenancy,IsDefault:G.isDefault==="true",Tags:this.parseTags(G.tagSet?.item)}))}}async describeSubnets(q){let z={Action:"DescribeSubnets",Version:"2016-11-15"};if(q?.SubnetIds)q.SubnetIds.forEach((G,J)=>{z[`SubnetId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Subnets:this.parseArray(H.subnetSet?.item).map((G)=>({SubnetId:G.subnetId,VpcId:G.vpcId,CidrBlock:G.cidrBlock,AvailabilityZone:G.availabilityZone,AvailableIpAddressCount:Number.parseInt(G.availableIpAddressCount),State:G.state,MapPublicIpOnLaunch:G.mapPublicIpOnLaunch==="true",Tags:this.parseTags(G.tagSet?.item)}))}}async describeSecurityGroups(q){let z={Action:"DescribeSecurityGroups",Version:"2016-11-15"};if(q?.GroupIds)q.GroupIds.forEach((G,J)=>{z[`GroupId.${J+1}`]=G});if(q?.GroupNames)q.GroupNames.forEach((G,J)=>{z[`GroupName.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{SecurityGroups:this.parseArray(H.securityGroupInfo?.item).map((G)=>({GroupId:G.groupId,GroupName:G.groupName,Description:G.groupDescription,VpcId:G.vpcId,IpPermissions:this.parseIpPermissions(G.ipPermissions?.item),IpPermissionsEgress:this.parseIpPermissions(G.ipPermissionsEgress?.item),Tags:this.parseTags(G.tagSet?.item)}))}}async describeInternetGateways(q){let z={Action:"DescribeInternetGateways",Version:"2016-11-15"};if(q?.InternetGatewayIds)q.InternetGatewayIds.forEach((G,J)=>{z[`InternetGatewayId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{InternetGateways:this.parseArray(H.internetGatewaySet?.item).map((G)=>({InternetGatewayId:G.internetGatewayId,Attachments:this.parseArray(G.attachmentSet?.item).map((J)=>({VpcId:J.vpcId,State:J.state})),Tags:this.parseTags(G.tagSet?.item)}))}}async describeAddresses(q){let z={Action:"DescribeAddresses",Version:"2016-11-15"};if(q?.AllocationIds)q.AllocationIds.forEach((G,J)=>{z[`AllocationId.${J+1}`]=G});if(q?.PublicIps)q.PublicIps.forEach((G,J)=>{z[`PublicIp.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Addresses:this.parseArray(H.addressesSet?.item).map((G)=>({PublicIp:G.publicIp,AllocationId:G.allocationId,AssociationId:G.associationId,InstanceId:G.instanceId,NetworkInterfaceId:G.networkInterfaceId,PrivateIpAddress:G.privateIpAddress,Domain:G.domain,Tags:this.parseTags(G.tagSet?.item)}))}}async allocateAddress(q){let z={Action:"AllocateAddress",Version:"2016-11-15"};if(q?.Domain)z.Domain=q.Domain;if(q?.TagSpecifications)q.TagSpecifications.forEach((G,J)=>{z[`TagSpecification.${J+1}.ResourceType`]=G.ResourceType,G.Tags.forEach((K,L)=>{z[`TagSpecification.${J+1}.Tag.${L+1}.Key`]=K.Key,z[`TagSpecification.${J+1}.Tag.${L+1}.Value`]=K.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{AllocationId:H.allocationId,PublicIp:H.publicIp,Domain:H.domain}}async associateAddress(q){let z={Action:"AssociateAddress",Version:"2016-11-15"};if(q.AllocationId)z.AllocationId=q.AllocationId;if(q.PublicIp)z.PublicIp=q.PublicIp;if(q.InstanceId)z.InstanceId=q.InstanceId;if(q.NetworkInterfaceId)z.NetworkInterfaceId=q.NetworkInterfaceId;if(q.PrivateIpAddress)z.PrivateIpAddress=q.PrivateIpAddress;if(q.AllowReassociation)z.AllowReassociation="true";return{AssociationId:(await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})).associationId}}async createTags(q){let z={Action:"CreateTags",Version:"2016-11-15"};q.Resources.forEach((H,G)=>{z[`ResourceId.${G+1}`]=H}),q.Tags.forEach((H,G)=>{z[`Tag.${G+1}.Key`]=H.Key,z[`Tag.${G+1}.Value`]=H.Value}),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async waitForInstanceState(q,z,H){let G=H?.maxWaitMs||300000,J=H?.pollIntervalMs||5000,K=Date.now();while(Date.now()-K<G){let L;try{L=await this.getInstance(q)}catch{L=void 0}if(L?.State?.Name===z)return L;await new Promise((M)=>setTimeout(M,J))}return}async createVpc(q){let z={Action:"CreateVpc",Version:"2016-11-15",CidrBlock:q.CidrBlock};if(q.InstanceTenancy)z.InstanceTenancy=q.InstanceTenancy;if(q.TagSpecifications)q.TagSpecifications.forEach((K,L)=>{z[`TagSpecification.${L+1}.ResourceType`]=K.ResourceType,K.Tags.forEach((M,O)=>{z[`TagSpecification.${L+1}.Tag.${O+1}.Key`]=M.Key,z[`TagSpecification.${L+1}.Tag.${O+1}.Value`]=M.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),J=(H.CreateVpcResponse||H).vpc;return{Vpc:J?{VpcId:J.vpcId,CidrBlock:J.cidrBlock,State:J.state,DhcpOptionsId:J.dhcpOptionsId,InstanceTenancy:J.instanceTenancy,IsDefault:J.isDefault==="true",Tags:this.parseTags(J.tagSet?.item)}:void 0}}async createSubnet(q){let z={Action:"CreateSubnet",Version:"2016-11-15",VpcId:q.VpcId,CidrBlock:q.CidrBlock};if(q.AvailabilityZone)z.AvailabilityZone=q.AvailabilityZone;if(q.TagSpecifications)q.TagSpecifications.forEach((K,L)=>{z[`TagSpecification.${L+1}.ResourceType`]=K.ResourceType,K.Tags.forEach((M,O)=>{z[`TagSpecification.${L+1}.Tag.${O+1}.Key`]=M.Key,z[`TagSpecification.${L+1}.Tag.${O+1}.Value`]=M.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),J=(H.CreateSubnetResponse||H).subnet;return{Subnet:J?{SubnetId:J.subnetId,VpcId:J.vpcId,CidrBlock:J.cidrBlock,AvailabilityZone:J.availabilityZone,AvailableIpAddressCount:J.availableIpAddressCount?Number.parseInt(J.availableIpAddressCount):void 0,State:J.state,MapPublicIpOnLaunch:J.mapPublicIpOnLaunch==="true",Tags:this.parseTags(J.tagSet?.item)}:void 0}}async modifySubnetAttribute(q){let z={Action:"ModifySubnetAttribute",Version:"2016-11-15",SubnetId:q.SubnetId};if(q.MapPublicIpOnLaunch!==void 0)z["MapPublicIpOnLaunch.Value"]=String(q.MapPublicIpOnLaunch.Value);await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async createSecurityGroup(q){let z={Action:"CreateSecurityGroup",Version:"2016-11-15",GroupName:q.GroupName,GroupDescription:q.Description};if(q.VpcId)z.VpcId=q.VpcId;if(q.TagSpecifications)q.TagSpecifications.forEach((J,K)=>{z[`TagSpecification.${K+1}.ResourceType`]=J.ResourceType,J.Tags.forEach((L,M)=>{z[`TagSpecification.${K+1}.Tag.${M+1}.Key`]=L.Key,z[`TagSpecification.${K+1}.Tag.${M+1}.Value`]=L.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{GroupId:(H.CreateSecurityGroupResponse||H).groupId}}async authorizeSecurityGroupIngress(q){let z={Action:"AuthorizeSecurityGroupIngress",Version:"2016-11-15",GroupId:q.GroupId};this.encodeIpPermissions(z,q.IpPermissions),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async authorizeSecurityGroupEgress(q){let z={Action:"AuthorizeSecurityGroupEgress",Version:"2016-11-15",GroupId:q.GroupId};this.encodeIpPermissions(z,q.IpPermissions),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async describeRouteTables(q){let z={Action:"DescribeRouteTables",Version:"2016-11-15"};if(q?.RouteTableIds)q.RouteTableIds.forEach((J,K)=>{z[`RouteTableId.${K+1}`]=J});if(q?.Filters)q.Filters.forEach((J,K)=>{z[`Filter.${K+1}.Name`]=J.Name,J.Values.forEach((L,M)=>{z[`Filter.${K+1}.Value.${M+1}`]=L})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=H.DescribeRouteTablesResponse||H;return{RouteTables:this.parseArray(G.routeTableSet?.item).map((J)=>({RouteTableId:J.routeTableId,VpcId:J.vpcId,Routes:this.parseArray(J.routeSet?.item).map((K)=>({DestinationCidrBlock:K.destinationCidrBlock,GatewayId:K.gatewayId,NatGatewayId:K.natGatewayId,State:K.state})),Associations:this.parseArray(J.associationSet?.item).map((K)=>({RouteTableAssociationId:K.routeTableAssociationId,SubnetId:K.subnetId,Main:K.main==="true"||K.main===!0})),Tags:this.parseTags(J.tagSet?.item)}))}}async deleteVpc(q){let z={Action:"DeleteVpc",Version:"2016-11-15",VpcId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async deleteSubnet(q){let z={Action:"DeleteSubnet",Version:"2016-11-15",SubnetId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async deleteSecurityGroup(q){await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({Action:"DeleteSecurityGroup",Version:"2016-11-15",GroupId:q}).toString()})}async describeNetworkInterfaces(q){let z={Action:"DescribeNetworkInterfaces",Version:"2016-11-15"};if(q?.NetworkInterfaceIds)q.NetworkInterfaceIds.forEach((J,K)=>{z[`NetworkInterfaceId.${K+1}`]=J});if(q?.Filters)q.Filters.forEach((J,K)=>{z[`Filter.${K+1}.Name`]=J.Name,J.Values.forEach((L,M)=>{z[`Filter.${K+1}.Value.${M+1}`]=L})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=H.DescribeNetworkInterfacesResponse||H;return{NetworkInterfaces:this.parseArray(G.networkInterfaceSet?.item).map((J)=>({NetworkInterfaceId:J.networkInterfaceId,SubnetId:J.subnetId,VpcId:J.vpcId,Status:J.status,Attachment:J.attachment?{AttachmentId:J.attachment.attachmentId,InstanceId:J.attachment.instanceId,Status:J.attachment.status}:void 0}))}}async detachNetworkInterface(q,z){let H={Action:"DetachNetworkInterface",Version:"2016-11-15",AttachmentId:q};if(z)H.Force="true";await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()})}async deleteNetworkInterface(q){let z={Action:"DeleteNetworkInterface",Version:"2016-11-15",NetworkInterfaceId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async describeRegions(){let q={Action:"DescribeRegions",Version:"2016-11-15"},z=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(q).toString()}),H=z.DescribeRegionsResponse||z;return{Regions:this.parseArray(H.regionInfo?.item).map((G)=>({RegionName:G.regionName,Endpoint:G.regionEndpoint}))}}async runInstances(q){let z={Action:"RunInstances",Version:"2016-11-15",ImageId:q.ImageId,InstanceType:q.InstanceType,MinCount:String(q.MinCount),MaxCount:String(q.MaxCount)};if(q.SecurityGroupIds)q.SecurityGroupIds.forEach((J,K)=>{z[`SecurityGroupId.${K+1}`]=J});if(q.SubnetId)z.SubnetId=q.SubnetId;if(q.UserData)z.UserData=q.UserData;if(q.IamInstanceProfile){if(q.IamInstanceProfile.Name)z["IamInstanceProfile.Name"]=q.IamInstanceProfile.Name;if(q.IamInstanceProfile.Arn)z["IamInstanceProfile.Arn"]=q.IamInstanceProfile.Arn}if(q.TagSpecifications)q.TagSpecifications.forEach((J,K)=>{z[`TagSpecification.${K+1}.ResourceType`]=J.ResourceType,J.Tags.forEach((L,M)=>{z[`TagSpecification.${K+1}.Tag.${M+1}.Key`]=L.Key,z[`TagSpecification.${K+1}.Tag.${M+1}.Value`]=L.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=H.RunInstancesResponse||H;return{Instances:this.parseInstances(G.instancesSet?.item||G.instancesSet)}}encodeIpPermissions(q,z){z.forEach((H,G)=>{let J=`IpPermissions.${G+1}`;if(H.IpProtocol!==void 0)q[`${J}.IpProtocol`]=H.IpProtocol;if(H.FromPort!==void 0)q[`${J}.FromPort`]=String(H.FromPort);if(H.ToPort!==void 0)q[`${J}.ToPort`]=String(H.ToPort);if(H.IpRanges)H.IpRanges.forEach((K,L)=>{if(K.CidrIp)q[`${J}.IpRanges.${L+1}.CidrIp`]=K.CidrIp;if(K.Description)q[`${J}.IpRanges.${L+1}.Description`]=K.Description});if(H.Ipv6Ranges)H.Ipv6Ranges.forEach((K,L)=>{if(K.CidrIpv6)q[`${J}.Ipv6Ranges.${L+1}.CidrIpv6`]=K.CidrIpv6;if(K.Description)q[`${J}.Ipv6Ranges.${L+1}.Description`]=K.Description});if(H.UserIdGroupPairs)H.UserIdGroupPairs.forEach((K,L)=>{if(K.GroupId)q[`${J}.Groups.${L+1}.GroupId`]=K.GroupId;if(K.UserId)q[`${J}.Groups.${L+1}.UserId`]=K.UserId;if(K.Description)q[`${J}.Groups.${L+1}.Description`]=K.Description})})}parseArray(q){if(!q)return[];return Array.isArray(q)?q:[q]}parseFirstIpv6Address(q){for(let z of this.parseArray(q))for(let H of this.parseArray(z?.ipv6AddressesSet?.item))if(H?.ipv6Address)return H.ipv6Address;return}parseTags(q){return this.parseArray(q).map((z)=>({Key:z.key,Value:z.value}))}parseReservations(q){return this.parseArray(q).map((z)=>({ReservationId:z.reservationId,Instances:this.parseInstances(z.instancesSet?.item||z.instancesSet)}))}parseInstances(q){return this.parseArray(q).map((z)=>({InstanceId:z.instanceId,ImageId:z.imageId,InstanceType:z.instanceType,State:z.instanceState?{Code:Number.parseInt(z.instanceState.code),Name:z.instanceState.name}:void 0,PrivateIpAddress:z.privateIpAddress,PublicIpAddress:z.ipAddress,Ipv6Address:this.parseFirstIpv6Address(z.networkInterfaceSet?.item),SubnetId:z.subnetId,VpcId:z.vpcId,SecurityGroups:this.parseArray(z.groupSet?.item).map((H)=>({GroupId:H.groupId,GroupName:H.groupName})),Tags:this.parseTags(z.tagSet?.item),LaunchTime:z.launchTime,Placement:z.placement?{AvailabilityZone:z.placement.availabilityZone,Tenancy:z.placement.tenancy}:void 0,Architecture:z.architecture,RootDeviceType:z.rootDeviceType,RootDeviceName:z.rootDeviceName,BlockDeviceMappings:this.parseArray(z.blockDeviceMapping?.item).map((H)=>({DeviceName:H.deviceName,Ebs:H.ebs?{VolumeId:H.ebs.volumeId,Status:H.ebs.status,AttachTime:H.ebs.attachTime,DeleteOnTermination:H.ebs.deleteOnTermination==="true"}:void 0})),IamInstanceProfile:z.iamInstanceProfile?{Arn:z.iamInstanceProfile.arn,Id:z.iamInstanceProfile.id}:void 0}))}parseIpPermissions(q){return this.parseArray(q).map((z)=>({IpProtocol:z.ipProtocol,FromPort:z.fromPort?Number.parseInt(z.fromPort):void 0,ToPort:z.toPort?Number.parseInt(z.toPort):void 0,IpRanges:this.parseArray(z.ipRanges?.item).map((H)=>({CidrIp:H.cidrIp,Description:H.description})),Ipv6Ranges:this.parseArray(z.ipv6Ranges?.item).map((H)=>({CidrIpv6:H.cidrIpv6,Description:H.description})),UserIdGroupPairs:this.parseArray(z.groups?.item).map((H)=>({GroupId:H.groupId,UserId:H.userId,Description:H.description}))}))}}class Z{client;region;constructor(q="us-east-1",z){this.region=q,this.client=new V}async putParameter(q){let z={Name:q.Name,Value:q.Value};if(q.Type)z.Type=q.Type;if(q.Description)z.Description=q.Description;if(q.KeyId)z.KeyId=q.KeyId;if(q.Overwrite!==void 0)z.Overwrite=q.Overwrite;if(q.AllowedPattern)z.AllowedPattern=q.AllowedPattern;if(q.Tags&&q.Tags.length>0)z.Tags=q.Tags;if(q.Tier)z.Tier=q.Tier;if(q.DataType)z.DataType=q.DataType;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.PutParameter","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Version:H.Version,Tier:H.Tier}}async getParameter(q){let z={Name:q.Name};if(q.WithDecryption!==void 0)z.WithDecryption=q.WithDecryption;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.GetParameter","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Parameter:H.Parameter?this.parseParameter(H.Parameter):void 0}}async getParameters(q){let z={Names:q.Names};if(q.WithDecryption!==void 0)z.WithDecryption=q.WithDecryption;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.GetParameters","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Parameters:H.Parameters?.map((G)=>this.parseParameter(G)),InvalidParameters:H.InvalidParameters}}async getParametersByPath(q){let z={Path:q.Path};if(q.Recursive!==void 0)z.Recursive=q.Recursive;if(q.WithDecryption!==void 0)z.WithDecryption=q.WithDecryption;if(q.MaxResults)z.MaxResults=q.MaxResults;if(q.NextToken)z.NextToken=q.NextToken;if(q.ParameterFilters&&q.ParameterFilters.length>0)z.ParameterFilters=q.ParameterFilters;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.GetParametersByPath","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Parameters:H.Parameters?.map((G)=>this.parseParameter(G)),NextToken:H.NextToken}}async deleteParameter(q){let z={Name:q.Name};await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.DeleteParameter","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)})}async deleteParameters(q){let z={Names:q},H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.DeleteParameters","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{DeletedParameters:H.DeletedParameters,InvalidParameters:H.InvalidParameters}}async describeParameters(q){let z={};if(q?.Filters&&q.Filters.length>0)z.Filters=q.Filters;if(q?.ParameterFilters&&q.ParameterFilters.length>0)z.ParameterFilters=q.ParameterFilters;if(q?.MaxResults)z.MaxResults=q.MaxResults;if(q?.NextToken)z.NextToken=q.NextToken;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.DescribeParameters","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Parameters:H.Parameters?.map((G)=>this.parseParameter(G)),NextToken:H.NextToken}}async getParameterHistory(q){let z={Name:q.Name};if(q.WithDecryption!==void 0)z.WithDecryption=q.WithDecryption;if(q.MaxResults)z.MaxResults=q.MaxResults;if(q.NextToken)z.NextToken=q.NextToken;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.GetParameterHistory","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Parameters:H.Parameters?.map((G)=>({Name:G.Name,Type:G.Type,KeyId:G.KeyId,LastModifiedDate:G.LastModifiedDate,LastModifiedUser:G.LastModifiedUser,Description:G.Description,Value:G.Value,Version:G.Version,Labels:G.Labels,Tier:G.Tier})),NextToken:H.NextToken}}async labelParameterVersion(q){let z={Name:q.Name,Labels:q.Labels};if(q.ParameterVersion!==void 0)z.ParameterVersion=q.ParameterVersion;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.LabelParameterVersion","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{InvalidLabels:H.InvalidLabels,ParameterVersion:H.ParameterVersion}}async addTagsToResource(q){let z={ResourceType:q.ResourceType,ResourceId:q.ResourceId,Tags:q.Tags};await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.AddTagsToResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)})}async removeTagsFromResource(q){let z={ResourceType:q.ResourceType,ResourceId:q.ResourceId,TagKeys:q.TagKeys};await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.RemoveTagsFromResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)})}async listTagsForResource(q){let z={ResourceType:q.ResourceType,ResourceId:q.ResourceId};return{TagList:(await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.ListTagsForResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)})).TagList}}async setString(q,z,H){return this.putParameter({Name:q,Value:z,Type:"String",Description:H?.description,Overwrite:H?.overwrite??!0,Tags:H?.tags})}async setSecureString(q,z,H){return this.putParameter({Name:q,Value:z,Type:"SecureString",Description:H?.description,Overwrite:H?.overwrite??!0,KeyId:H?.kmsKeyId,Tags:H?.tags})}async getValue(q){return(await this.getParameter({Name:q,WithDecryption:!0})).Parameter?.Value}async getAllByPath(q,z=!0){let H=[],G;do{let J=await this.getParametersByPath({Path:q,Recursive:z,WithDecryption:!0,NextToken:G});if(J.Parameters)H.push(...J.Parameters);G=J.NextToken}while(G);return H}parseParameter(q){return{Name:q.Name,Type:q.Type,Value:q.Value,Version:q.Version,LastModifiedDate:q.LastModifiedDate,ARN:q.ARN,DataType:q.DataType,Description:q.Description,AllowedPattern:q.AllowedPattern,KeyId:q.KeyId,Tier:q.Tier}}async sendCommand(q){if(!q.InstanceIds&&!q.Targets)throw Error("SendCommand requires either InstanceIds or Targets");let z={DocumentName:q.DocumentName};if(q.InstanceIds)z.InstanceIds=q.InstanceIds;if(q.Targets)z.Targets=q.Targets;if(q.Parameters)z.Parameters=q.Parameters;if(q.TimeoutSeconds)z.TimeoutSeconds=q.TimeoutSeconds;if(q.Comment)z.Comment=q.Comment;if(q.OutputS3BucketName)z.OutputS3BucketName=q.OutputS3BucketName;if(q.OutputS3KeyPrefix)z.OutputS3KeyPrefix=q.OutputS3KeyPrefix;let H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.SendCommand","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{CommandId:H.Command?.CommandId,Status:H.Command?.Status,StatusDetails:H.Command?.StatusDetails}}async getCommandInvocation(q){let z={CommandId:q.CommandId,InstanceId:q.InstanceId},H=await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.GetCommandInvocation","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)});return{Status:H.Status,StatusDetails:H.StatusDetails,StandardOutputContent:H.StandardOutputContent,StandardErrorContent:H.StandardErrorContent,ResponseCode:H.ResponseCode}}async runShellCommand(q,z,H){let G=await this.sendCommand({InstanceIds:[q],DocumentName:"AWS-RunShellScript",Parameters:{commands:z},TimeoutSeconds:H?.timeoutSeconds||600});if(!G.CommandId)return{success:!1,error:"Failed to send command"};if(H?.waitForCompletion===!1)return{success:!0,status:"Pending"};let J=H?.pollIntervalMs||2000,K=H?.maxWaitMs||300000,L=Date.now();while(Date.now()-L<K){await new Promise((M)=>setTimeout(M,J));try{let M=await this.getCommandInvocation({CommandId:G.CommandId,InstanceId:q});if(M.Status==="Success")return{success:!0,output:M.StandardOutputContent,error:M.StandardErrorContent,status:M.Status};if(M.Status==="Failed"||M.Status==="Cancelled"||M.Status==="TimedOut")return{success:!1,output:M.StandardOutputContent,error:M.StandardErrorContent||M.StatusDetails,status:M.Status}}catch(M){if(!M.message?.includes("InvocationDoesNotExist"))return{success:!1,error:M.message}}}return{success:!1,error:"Command timed out waiting for completion"}}async listCommandInvocations(q){let z={CommandId:q.CommandId};if(q.Details)z.Details=!0;return((await this.client.request({service:"ssm",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonSSM.ListCommandInvocations","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(z)})).CommandInvocations||[]).map((J)=>({InstanceId:J.InstanceId,Status:J.Status,StatusDetails:J.StatusDetails,StandardOutputContent:J.CommandPlugins?.[0]?.Output,StandardErrorContent:J.CommandPlugins?.[0]?.StandardErrorUrl}))}async sendCommandByTags(q){let z=Object.entries(q.tags).map(([O,U])=>({Key:`tag:${O}`,Values:[U]})),H=await this.sendCommand({Targets:z,DocumentName:"AWS-RunShellScript",Parameters:{commands:q.commands},TimeoutSeconds:q.timeoutSeconds||600,Comment:q.comment});if(!H.CommandId)return{success:!1,instanceCount:0,perInstance:[],error:"Failed to send command"};let G=q.pollIntervalMs||3000,J=q.maxWaitMs||600000,K=Date.now(),L=new Set(["Success","Failed","Cancelled","TimedOut"]),M=[];while(Date.now()-K<J){await new Promise((O)=>setTimeout(O,G));try{if(M=await this.listCommandInvocations({CommandId:H.CommandId,Details:!0}),M.length===0)continue;if(M.every((U)=>L.has(U.Status||""))){let U=M.map((Q)=>({instanceId:Q.InstanceId,status:Q.Status||"Unknown",output:Q.StandardOutputContent,error:Q.StandardErrorContent||Q.StatusDetails})),X=M.every((Q)=>Q.Status==="Success");return{success:X,instanceCount:M.length,perInstance:U,error:X?void 0:"One or more instances reported a non-success status"}}}catch(O){if(!O.message?.includes("InvocationDoesNotExist"))return{success:!1,instanceCount:0,perInstance:[],error:O.message}}}return{success:!1,instanceCount:M.length,perInstance:M.map((O)=>({instanceId:O.InstanceId,status:O.Status||"Unknown"})),error:"Command timed out waiting for all instances to complete"}}}
+export{Y as Nh,Z as Oh};

package/dist/deploy/attach-credentials.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The minimum a driver has to produce for a server to be attributed.
+ *
+ * Structural rather than a provider type so a Hetzner server satisfies it as-is
+ * and another driver can satisfy it without importing anything.
+ */
+export interface ReachableServer {
+    name: string;
+    labels?: Record<string, string>;
+}
+export interface CredentialReach {
+    /** Every server the credential enumerated. */
+    total: number;
+    /** Servers belonging to the project being attached TO. Expected reach. */
+    owner: string[];
+    /** Servers belonging to the attaching project itself, if it has any. */
+    self: string[];
+    /** Servers owned by unrelated ts-cloud projects, keyed by project slug. */
+    others: Map<string, string[]>;
+    /**
+     * Servers carrying no ts-cloud project label.
+     *
+     * Counted separately because they are the reach most likely to surprise: not
+     * managed by ts-cloud at all, and so not visible in any ts-cloud config, yet
+     * just as writable by the token.
+     */
+    unmanaged: string[];
+}
+/**
+ * Attribute every server the credential can see to a project.
+ *
+ * `ownerSlug` is what `cloud.attachTo` names; `selfSlug` is the deploying
+ * project. Splitting those two out of `others` is the point: reach over the owner
+ * is the reach being asked for, reach over anything else is the reach nobody
+ * asked for, and only the second number is an argument against attaching.
+ */
+export declare function describeCredentialReach(servers: ReachableServer[], options: {
+    ownerSlug: string;
+    selfSlug?: string;
+}): CredentialReach;
+/** Servers the credential reaches that neither project being joined owns. */
+export declare function unrelatedReachCount(reach: CredentialReach): number;
+/**
+ * The credential radius as plan lines, ready to print.
+ *
+ * Returns lines rather than printing so the caller owns the output stream and
+ * this stays testable. Sorted, because a plan that reorders itself between runs
+ * is a plan nobody diffs.
+ *
+ * When the reach is exactly the owner's box and this project's own, there is
+ * nothing to warn about and the summary says so in one line - a warning that
+ * fires every time is a warning that gets skipped.
+ */
+export declare function formatCredentialReach(reach: CredentialReach, options: {
+    ownerSlug: string;
+    selfSlug?: string;
+}): string[];

package/dist/deploy/index.js

@@ -1,168 +1 @@
-import {
-  buildAndPushContainerImage,
-  buildFunctionEnv,
-  buildServerTopology,
-  buildServerlessTopology,
-  buildTopology,
-  collectEgressMetrics,
-  createContainerImageDependencies,
-  createExistingStaticFullStackDependencies,
-  createStaticApiOriginDependencies,
-  dashboardActions,
-  dashboardPageRoutes,
-  deployExistingStaticFullStack,
-  deployServerlessApp,
-  deploySite,
-  deployStaticApiOrigin,
-  egressReportMetrics,
-  ensureDashboardActor,
-  estimateExistingStaticFullStackMonthlyCost,
-  estimateStaticApiOriginMonthlyCost,
-  fetchEgressReport,
-  generateExistingStaticFullStackTemplate,
-  hashContainerContext,
-  infraEnvFromOutputs,
-  initializeDashboardControlPlane,
-  redeployServerlessApp,
-  resolveDashboardAction,
-  resolveDashboardData,
-  resolveLegacyDashboardRoute,
-  rollbackServerlessApp,
-  routesForDashboard,
-  runRemoteCommand,
-  sanitizeCloudConfig,
-  setMaintenance,
-  startLocalDashboardServer,
-  synchronizeDashboardUsers,
-  trackDashboardOperation,
-  verifyStaticApiOrigin
-} from "../chunk-rxgchb08.js";
-import {
-  deleteStaticSite,
-  deployStaticSite,
-  deployStaticSiteFull,
-  deployStaticSiteWithExternalDns,
-  deployStaticSiteWithExternalDnsFull,
-  generateExternalDnsStaticSiteTemplate,
-  generateStaticSiteTemplate,
-  invalidateCache,
-  uploadStaticFiles
-} from "../chunk-728jvrr0.js";
-import {
-  buildAndPushServerlessImage
-} from "../chunk-fgk8cqew.js";
-import"../chunk-6a1t7fnq.js";
-import"../chunk-nsgqsmrh.js";
-import"../chunk-01d86gt1.js";
-import"../chunk-50jpda9q.js";
-import"../chunk-he9a874b.js";
-import"../chunk-qr803fye.js";
-import"../chunk-32e7ya18.js";
-import {
-  IPV6_EXCLUDED_HOST_LABELS,
-  MANAGEMENT_DASHBOARD_SITE,
-  buildManagementDashboardArtifact,
-  collectServerDnsDomains,
-  dashboardCredentialsFile,
-  deployShipsFiles,
-  ensureManagementDashboard,
-  hasComputeConfigured,
-  hasProxyUpstream,
-  hostAcceptsIpv6,
-  isPhpSite,
-  normalizePublicIpv6,
-  reconcileAddressRecords,
-  removeStaleServerAddressRecords,
-  resolveDashboardAuth,
-  resolveProxyUpstreams,
-  resolveSiteDeployTarget,
-  resolveSiteKind,
-  resolveUiSource,
-  shipsARelease,
-  shipsToBucket,
-  siteInstallBase,
-  validateDeploymentConfig,
-  verifyAddressRecord
-} from "../chunk-hg7rhrgd.js";
-import"../chunk-7m60qnc8.js";
-import"../chunk-4cjrg98a.js";
-import"../chunk-rds0sy87.js";
-import"../chunk-zqtpg06c.js";
-import"../chunk-29rse4p1.js";
-import"../chunk-va2yd85b.js";
-import"../chunk-aa2dkn7b.js";
-import"../chunk-050r7ycy.js";
-import"../chunk-v0bahtg2.js";
-export {
-  verifyStaticApiOrigin,
-  verifyAddressRecord,
-  validateDeploymentConfig,
-  uploadStaticFiles,
-  trackDashboardOperation,
-  synchronizeDashboardUsers,
-  startLocalDashboardServer,
-  siteInstallBase,
-  shipsToBucket,
-  shipsARelease,
-  setMaintenance,
-  sanitizeCloudConfig,
-  runRemoteCommand,
-  routesForDashboard,
-  rollbackServerlessApp,
-  resolveUiSource,
-  resolveSiteKind,
-  resolveSiteDeployTarget,
-  resolveProxyUpstreams,
-  resolveLegacyDashboardRoute,
-  resolveDashboardData,
-  resolveDashboardAuth,
-  resolveDashboardAction,
-  removeStaleServerAddressRecords,
-  redeployServerlessApp,
-  reconcileAddressRecords,
-  normalizePublicIpv6,
-  isPhpSite,
-  invalidateCache,
-  initializeDashboardControlPlane,
-  infraEnvFromOutputs,
-  hostAcceptsIpv6,
-  hashContainerContext,
-  hasProxyUpstream,
-  hasComputeConfigured,
-  generateStaticSiteTemplate,
-  generateExternalDnsStaticSiteTemplate,
-  generateExistingStaticFullStackTemplate,
-  fetchEgressReport,
-  estimateStaticApiOriginMonthlyCost,
-  estimateExistingStaticFullStackMonthlyCost,
-  ensureManagementDashboard,
-  ensureDashboardActor,
-  egressReportMetrics,
-  deployStaticSiteWithExternalDnsFull,
-  deployStaticSiteWithExternalDns,
-  deployStaticSiteFull,
-  deployStaticSite,
-  deployStaticApiOrigin,
-  deploySite,
-  deployShipsFiles,
-  deployServerlessApp,
-  deployExistingStaticFullStack,
-  deleteStaticSite,
-  dashboardPageRoutes,
-  dashboardCredentialsFile,
-  dashboardActions,
-  createStaticApiOriginDependencies,
-  createExistingStaticFullStackDependencies,
-  createContainerImageDependencies,
-  collectServerDnsDomains,
-  collectEgressMetrics,
-  buildTopology,
-  buildServerlessTopology,
-  buildServerTopology,
-  buildManagementDashboardArtifact,
-  buildFunctionEnv,
-  buildAndPushServerlessImage,
-  buildAndPushContainerImage,
-  MANAGEMENT_DASHBOARD_SITE,
-  IPV6_EXCLUDED_HOST_LABELS
-};
+import{Ac as Z,Bc as $,Cc as aa,Dc as ba,Ec as ca,Fc as da,Gc as ea,Hc as fa,Ic as ga,Jc as ha,Kc as ia,Lc as ja,Mc as ka,Nc as la,Oc as ma,ic as y,jc as z,kc as A,lc as B,mc as C,nc as D,oc as E,od as na,pc as O,pd as oa,qc as P,qd as pa,rc as Q,rd as qa,sc as R,tc as S,uc as T,vc as U,wc as V,xc as W,yc as X,zc as Y}from"../chunk-1egjn203.js";import{Ad as N,sd as F,td as G,ud as H,vd as I,wd as J,xd as K,yd as L,zd as M}from"../chunk-v0p3hpc3.js";import{Id as _}from"../chunk-2wx29qga.js";import"../chunk-8ea5022g.js";import"../chunk-hg3c48cp.js";import"../chunk-sdqa9ghv.js";import"../chunk-bggt4n6e.js";import"../chunk-m5azeva3.js";import"../chunk-8xqn3c0w.js";import"../chunk-wdzjbecg.js";import{Ah as u,Bh as v,Ch as w,Dh as x,Qf as a,Rf as b,Sf as c,Tf as d,Uf as e,Vf as f,Wf as g,bg as h,cg as i,dg as j,eg as k,fg as l,gg as m,hg as n,ig as o,jg as p,kg as q,lg as r,yh as s,zh as t}from"../chunk-xrebj679.js";import"../chunk-y21zk0pn.js";import"../chunk-b4esxhmw.js";import"../chunk-r3qf56b3.js";import"../chunk-0ccta6z6.js";import"../chunk-gahsdmxf.js";import"../chunk-cwkg37rs.js";import"../chunk-b8e5wzwn.js";import"../chunk-dskvqt67.js";import"../chunk-xt3s24vr.js";export{R as verifyStaticApiOrigin,g as verifyAddressRecord,o as validateDeploymentConfig,K as uploadStaticFiles,B as trackDashboardOperation,A as synchronizeDashboardUsers,qa as startLocalDashboardServer,h as siteInstallBase,q as shipsToBucket,p as shipsARelease,ea as setMaintenance,na as sanitizeCloudConfig,fa as runRemoteCommand,E as routesForDashboard,da as rollbackServerlessApp,v as resolveUiSource,m as resolveSiteKind,l as resolveSiteDeployTarget,j as resolveProxyUpstreams,D as resolveLegacyDashboardRoute,ja as resolveDashboardData,u as resolveDashboardAuth,pa as resolveDashboardAction,b as removeStaleServerAddressRecords,ca as redeployServerlessApp,f as reconcileAddressRecords,c as normalizePublicIpv6,i as isPhpSite,L as invalidateCache,z as initializeDashboardControlPlane,$ as infraEnvFromOutputs,e as hostAcceptsIpv6,X as hashContainerContext,k as hasProxyUpstream,n as hasComputeConfigured,I as generateStaticSiteTemplate,F as generateExternalDnsStaticSiteTemplate,U as generateExistingStaticFullStackTemplate,la as fetchEgressReport,S as estimateStaticApiOriginMonthlyCost,W as estimateExistingStaticFullStackMonthlyCost,w as ensureManagementDashboard,y as ensureDashboardActor,ka as egressReportMetrics,H as deployStaticSiteWithExternalDnsFull,G as deployStaticSiteWithExternalDns,N as deployStaticSiteFull,J as deployStaticSite,Q as deployStaticApiOrigin,O as deploySite,r as deployShipsFiles,ba as deployServerlessApp,V as deployExistingStaticFullStack,M as deleteStaticSite,C as dashboardPageRoutes,t as dashboardCredentialsFile,oa as dashboardActions,P as createStaticApiOriginDependencies,T as createExistingStaticFullStackDependencies,Y as createContainerImageDependencies,a as collectServerDnsDomains,ma as collectEgressMetrics,ia as buildTopology,ha as buildServerlessTopology,ga as buildServerTopology,x as buildManagementDashboardArtifact,aa as buildFunctionEnv,_ as buildAndPushServerlessImage,Z as buildAndPushContainerImage,s as MANAGEMENT_DASHBOARD_SITE,d as IPV6_EXCLUDED_HOST_LABELS};

package/dist/deploy/site-ports.d.ts

@@ -0,0 +1,151 @@
+import type { CloudConfig } from '@ts-cloud/core';
+/**
+ * Port ownership across the projects sharing one box.
+ *
+ * A box can host several independent projects: each one's deploy writes its own
+ * rpx registry fragment and the assembler merges them (see `RPX_SITES_DIR`).
+ * That composes cleanly for ROUTES, because routes are keyed by host. It does
+ * not compose for PORTS, because every app generated from the same template
+ * declares the same loopback ports, and `validateDeploymentConfig` only ever
+ * sees one project's `sites`.
+ *
+ * The second attach therefore passes validation, and then does something worse
+ * than failing: ts-cloud's units do not set exclusive binding, so both listeners
+ * bind and the kernel load-balances between them. Nothing errors, both services
+ * look healthy, and each domain answers with the other project's site for about
+ * half its requests. That is not hypothetical - it is what happened to
+ * predicthq.org when a storefront picked a port by reading other projects'
+ * config files rather than the box (see `assertPortsAreFree` in stacks).
+ *
+ * `assertPortsAreFree` catches this late, from the deploying box over SSH, by
+ * comparing wanted ports against live listeners. That is the better evidence and
+ * it stays the last line of defence. What it cannot do is avoid the clash: it
+ * exits and tells the operator to go pick free ports by hand. This module is the
+ * other half - deciding the ports before anything is shipped, from data a plan
+ * already has.
+ *
+ * The fix does not need new bookkeeping on the box. The fragments already record
+ * every upstream a project serves, so the host is its own port registry - it was
+ * simply never read. This module turns those fragments into a port -> owner map,
+ * finds the collisions, and allocates around them.
+ *
+ * Everything here is pure. The one thing that must touch the box, reading the
+ * fragments, is split into a script builder and a parser so both halves are
+ * testable without a server.
+ *
+ * @see https://github.com/stacksjs/ts-cloud/issues/168
+ */
+/**
+ * Where the rpx gateway keeps one registry fragment per project.
+ *
+ * Deliberately duplicated from `RPX_SITES_DIR` rather than imported:
+ * `rpx-gateway.ts` imports `site-target.ts`, and this module imports it too, so
+ * importing the constant from there would close a cycle. `site-ports.test.ts`
+ * asserts the two stay equal, so the duplicate cannot drift silently.
+ */
+export declare const HOST_SITES_DIR = "/etc/rpx/sites.d";
+export interface SitePortRange {
+    /** Lowest port the allocator may hand out, inclusive. */
+    start: number;
+    /** Highest port the allocator may hand out, inclusive. */
+    end: number;
+}
+/**
+ * The window the allocator searches.
+ *
+ * Chosen to contain the template's own defaults (3022/3023) so that an app which
+ * has never thought about ports keeps the ports it already had whenever they are
+ * free - see {@link allocateSitePorts}, which only moves a site that actually
+ * collides.
+ */
+export declare const DEFAULT_SITE_PORT_RANGE: SitePortRange;
+/**
+ * One project's registry fragment, as written by the deploy:
+ * `JSON.stringify({ slug, ...RpxGatewayConfig })`.
+ *
+ * Only the fields this module reads are declared. A fragment written by an older
+ * ts-cloud may be missing `slug`, which the writer defaults to `'app'`.
+ */
+export interface HostSiteFragment {
+    slug?: string;
+    proxies?: Array<{
+        from?: string | string[];
+    }>;
+}
+/** Port -> the slug of the project that already serves it on this box. */
+export type PortOwners = Map<number, string>;
+/**
+ * The port from an rpx upstream (`host:port`).
+ *
+ * Splits on the LAST colon so a bracketed IPv6 literal (`[::1]:3022`) parses as
+ * port 3022 rather than as part of the address. Returns `undefined` for anything
+ * that is not a valid TCP port, so a malformed fragment narrows the map instead
+ * of poisoning it with NaN.
+ */
+export declare function parseUpstreamPort(upstream: string): number | undefined;
+/**
+ * Every port the box already serves, mapped to the project that owns it.
+ *
+ * `ignoreSlug` must be set to the deploying project's own slug. Its fragment is
+ * already on the box from the previous deploy, so without that the second deploy
+ * of an attached app reports a conflict with itself and can never succeed.
+ *
+ * First writer wins for a given port, which keeps the result deterministic when
+ * two fragments disagree - a state that is itself the bug being reported, so the
+ * caller sees one stable owner rather than an order-dependent one.
+ */
+export declare function occupiedHostPorts(fragments: HostSiteFragment[], options?: {
+    ignoreSlug?: string;
+}): PortOwners;
+/**
+ * A shell snippet that dumps every registry fragment on the box, one
+ * base64-encoded JSON document per line.
+ *
+ * base64 rather than raw `cat`, because the fragments are pretty-printed and so
+ * span many lines; encoding makes the output unambiguously one record per line
+ * without depending on a JSON tool being installed. Only POSIX utilities plus
+ * `base64` are used, both present on the provisioned image - the same reason
+ * `resize-remote.ts` enumerates these files with plain `find`.
+ *
+ * A missing directory is not an error: a box with no fragments yet prints
+ * nothing, and {@link parseHostSiteFragments} reads that as "no co-tenants".
+ */
+export declare function buildHostSitePortsScript(sitesDir?: string): string;
+/**
+ * Parse the output of {@link buildHostSitePortsScript}.
+ *
+ * A fragment that will not decode or parse is skipped rather than thrown, which
+ * matches how the box's own assembler treats a corrupt fragment: one bad file
+ * must not take the operation down. The cost is that its ports are invisible to
+ * the collision check, which is strictly better than today, where every
+ * project's ports are.
+ */
+export declare function parseHostSiteFragments(stdout: string): HostSiteFragment[];
+export interface SitePortAllocation {
+    /** Site name within the deploying project's `sites`. */
+    site: string;
+    /** The port the site should bind after allocation. */
+    port: number;
+    /** What the config asked for, when it asked for anything. */
+    declared?: number;
+    /** Did the allocation have to move the site off its declared port? */
+    moved: boolean;
+}
+export interface SitePortAllocationResult {
+    allocations: SitePortAllocation[];
+    errors: string[];
+}
+/**
+ * Assign a free port to every server-app site, preferring the one it declared.
+ *
+ * The declared port is kept whenever it is free, so allocation is a no-op on a
+ * box with no co-tenants and an app's ports stay stable across deploys. A site
+ * whose port is taken walks upward to the next free one, which keeps the result
+ * deterministic and close to what the author wrote - a template app landing on
+ * 3024 rather than an arbitrary high port.
+ *
+ * Only `server-app` sites are considered. A bucket, static, redirect or proxy
+ * site binds nothing, and `validateDeploymentConfig` already warns when one of
+ * those declares a port.
+ */
+export declare function allocateSitePorts(config: CloudConfig, occupied: ReadonlyMap<number, string>, range?: SitePortRange): SitePortAllocationResult;

package/dist/deploy/site-target.d.ts

@@ -72,6 +72,29 @@ export interface DeploymentValidationResult {
     errors: string[];
     warnings: string[];
 }
+export interface ValidateDeploymentOptions {
+    /**
+     * Ports this box already serves for OTHER projects, as port -> owning slug.
+     *
+     * Validation is otherwise blind to co-tenants: it only ever sees one project's
+     * `sites`, so two apps attached to the same server can both declare the
+     * template's default port and both pass. The box does not reject the second
+     * one either - ts-cloud's units do not set exclusive binding, so both bind and
+     * the kernel load-balances, leaving each domain serving the other project's
+     * site about half the time with nothing logged as an error. Supplying this
+     * turns that into a plan-time error naming the project holding the port.
+     *
+     * Build it with `occupiedHostPorts()` from `./site-ports`, passing the
+     * deploying project's own slug as `ignoreSlug` - its fragment is already on the
+     * box from the last deploy, and counting it would make every redeploy conflict
+     * with itself.
+     *
+     * Omitted means "no co-tenant information", which validates exactly as before.
+     *
+     * @see https://github.com/stacksjs/ts-cloud/issues/168
+     */
+    occupiedPorts?: ReadonlyMap<number, string>;
+}
 /**
  * Validate the per-site deployment configuration up front, turning what used to
  * be silent runtime failures (e.g. a `start` site with no compute server) into
@@ -80,7 +103,7 @@ export interface DeploymentValidationResult {
  * Never throws — returns structured `{ errors, warnings }`. Callers should abort
  * on any error and print warnings while continuing.
  */
-export declare function validateDeploymentConfig(config: CloudConfig): DeploymentValidationResult;
+export declare function validateDeploymentConfig(config: CloudConfig, options?: ValidateDeploymentOptions): DeploymentValidationResult;
 /**
  * Does this site produce a release the compute deploy has to build, package and
  * ship?

package/dist/dns/index.js

@@ -1,41 +1 @@
-import {
-  CloudflareProvider,
-  DnsProviderFactory,
-  GoDaddyProvider,
-  PROXIABLE_RECORD_TYPES,
-  PorkbunProvider,
-  Route53Provider,
-  UnifiedDnsValidator,
-  createDnsProvider,
-  createGoDaddyValidator,
-  createPorkbunValidator,
-  createRoute53Validator,
-  detectDnsProvider,
-  dnsProviders,
-  policyTag,
-  qualifyName,
-  reconcileDeclaredRecords,
-  resolveDeclaredRecords
-} from "../chunk-qr803fye.js";
-import"../chunk-32e7ya18.js";
-import"../chunk-zqtpg06c.js";
-import"../chunk-v0bahtg2.js";
-export {
-  resolveDeclaredRecords,
-  reconcileDeclaredRecords,
-  qualifyName,
-  policyTag,
-  dnsProviders,
-  detectDnsProvider,
-  createRoute53Validator,
-  createPorkbunValidator,
-  createGoDaddyValidator,
-  createDnsProvider,
-  UnifiedDnsValidator,
-  Route53Provider,
-  PorkbunProvider,
-  PROXIABLE_RECORD_TYPES,
-  GoDaddyProvider,
-  DnsProviderFactory,
-  CloudflareProvider
-};
+import{Af as e,Bf as f,Cf as g,Df as h,Ef as i,Ff as j,Gf as k,Hf as l,If as m,Jf as n,Kf as o,Lf as p,Mf as q,vf as a,wf as b,xf as c,zf as d}from"../chunk-8xqn3c0w.js";import"../chunk-wdzjbecg.js";import"../chunk-0ccta6z6.js";import"../chunk-xt3s24vr.js";export{g as resolveDeclaredRecords,h as reconcileDeclaredRecords,f as qualifyName,e as policyTag,q as dnsProviders,o as detectDnsProvider,m as createRoute53Validator,k as createPorkbunValidator,l as createGoDaddyValidator,n as createDnsProvider,j as UnifiedDnsValidator,i as Route53Provider,b as PorkbunProvider,a as PROXIABLE_RECORD_TYPES,c as GoDaddyProvider,p as DnsProviderFactory,d as CloudflareProvider};