@stacksjs/ts-cloud 0.9.2 → 0.9.4

package/dist/bin/chunk-21e0mavm.js

@@ -0,0 +1 @@
+import{a as k,b as l,c as m,d as n,e as o,f as p,g as q,h as z,i as A,j as B,k as C,l as D,m as E,n as F,o as G}from"./chunk-hzgz13nf.js";import{Je as H,Ke as I,Le as J,Me as K,Ne as L,Oe as M}from"./chunk-3gykfyq4.js";import{Pe as r,Qe as s,Re as t,Se as u,Te as v,Ue as w,Ve as x,We as y}from"./chunk-ax9mr6wm.js";import{do as a,eo as b,fo as c,go as d,ho as e,io as f,jo as g,ko as h,lo as i,mo as j}from"./chunk-rxcvf10f.js";import"./chunk-mh0kdzqp.js";export{M as wafEventTelemetry,t as sysctlHardening,m as ruleMatches,L as renderWafInstallScript,K as renderWafConfig,u as renderSysctlFile,v as renderNftablesRuleset,w as renderDdosInstallScript,j as recursionBlockedResponse,n as rateLimitKey,p as rateLimitHeaders,i as propagationHeaders,x as planMitigation,f as parseChain,G as mergeControlsIntoConfig,s as isValidCidr,I as isSafePattern,g as inspectInvocation,J as globToRegex,l as globMatches,d as functionFingerprint,H as escapeSecLang,D as describePosture,q as defaultRateLimitRules,y as applyMitigationFactor,E as applyControlsToRateLimits,F as applyControlsToDdos,c as TRACE_HEADER,h as RecursionGuard,o as RateLimiter,k as RATE_LIMIT_KEY_SEPARATOR,C as ProtectionControlStore,z as PROTECTION_SETTING,A as MAX_CONTROL_HOURS,a as DEPTH_HEADER,e as DEFAULT_RECURSION_LIMITS,r as DEFAULT_DDOS_THRESHOLDS,B as DEFAULT_ATTACK_MODE_HOURS,b as CHAIN_HEADER};

package/dist/bin/chunk-271gk1n2.js

@@ -0,0 +1,6 @@
+import{Uo as M,Vo as O}from"./chunk-mh0kdzqp.js";var b={};M(b,{warning:()=>$,warn:()=>_,table:()=>W,success:()=>Y,step:()=>L,select:()=>S,prompt:()=>U,info:()=>T,header:()=>k,getAwsRegions:()=>V,getAwsAccountId:()=>C,formatDuration:()=>z,formatBytes:()=>v,error:()=>Z,confirm:()=>I,colors:()=>B,colorize:()=>K,checkAwsCredentials:()=>y,checkAwsCli:()=>R,box:()=>A,Spinner:()=>D,ProgressBar:()=>G});var B={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function K(j,q){return`${B[q]}${j}${B.reset}`}function Y(j){console.log(`${B.green}✓${B.reset} ${j}`)}function Z(j){console.error(`${B.red}✗${B.reset} ${j}`)}function _(j){console.warn(`${B.yellow}⚠${B.reset} ${j}`)}var $=_;function T(j){console.log(`${B.blue}ℹ${B.reset} ${j}`)}function L(j){console.log(`${B.cyan}→${B.reset} ${j}`)}function k(j){console.log(`
+${B.bright}${B.cyan}${j}${B.reset}
+`)}var Q=!!(process.env.CI||process.env.GITHUB_ACTIONS||process.env.BUILDKITE||process.env.CIRCLECI||process.env.GITLAB_CI);class D{frames=["⠋","⠙","⠹","⠸","⠼","⠴","⠦","⠧","⠇","⠏"];interval=null;currentFrame=0;message;constructor(j){this.message=j}get text(){return this.message}set text(j){if(this.message=j,Q&&this.interval)console.log(`  ${j}`)}start(){if(Q){console.log(`  ${this.message}`),this.interval=!0;return}this.interval=setInterval(()=>{process.stdout.write(`\r${B.cyan}${this.frames[this.currentFrame]}${B.reset} ${this.message}`),this.currentFrame=(this.currentFrame+1)%this.frames.length},80)}succeed(j){this.stop(),Y(j||this.message)}fail(j){this.stop(),Z(j||this.message)}warn(j){this.stop(),$(j||this.message)}stop(){if(this.interval){if(!Q)process.stdout.write("\r");if(typeof this.interval==="object")clearInterval(this.interval);this.interval=null}}}class G{total;current=0;width=40;constructor(j){this.total=j}update(j){this.current=j,this.render()}increment(){this.current++,this.render()}render(){let j=Math.floor(this.current/this.total*100),q=Math.floor(this.current/this.total*this.width),E=this.width-q,F=`${"█".repeat(q)}${"░".repeat(E)}`;if(process.stdout.write(`\r${B.cyan}${F}${B.reset} ${j}% (${this.current}/${this.total})`),this.current>=this.total)process.stdout.write(`
+`)}}async function U(j,q){let F=(await import("node:readline")).createInterface({input:process.stdin,output:process.stdout});return new Promise((J)=>{let H=q?`${B.cyan}?${B.reset} ${j} ${B.gray}(${q})${B.reset}: `:`${B.cyan}?${B.reset} ${j}: `;F.question(H,(N)=>{F.close(),J(N||q||"")})})}async function I(j,q=!1){let E=await U(`${j} (y/n)`,q?"y":"n");return E.toLowerCase()==="y"||E.toLowerCase()==="yes"}async function S(j,q){console.log(`${B.cyan}?${B.reset} ${j}`),q.forEach((J,H)=>{console.log(`  ${B.gray}${H+1}.${B.reset} ${J}`)});let E=await U("Select","1"),F=Number.parseInt(E)-1;if(F>=0&&F<q.length)return q[F];return q[0]}function W(j,q){let E=j.map((J,H)=>{let N=Math.max(...q.map((P)=>(P[H]||"").length));return Math.max(J.length,N)}),F=j.map((J,H)=>J.padEnd(E[H])).join("  ");console.log(K(F,"bright")),console.log(K("─".repeat(F.length),"gray")),q.forEach((J)=>{let H=J.map((N,P)=>(N||"").padEnd(E[P])).join("  ");console.log(H)})}function v(j){if(j===0)return"0 B";let q=1024,E=["B","KB","MB","GB","TB"],F=Math.floor(Math.log(j)/Math.log(q));return`${Number.parseFloat((j/q**F).toFixed(2))} ${E[F]}`}function z(j){if(j<1000)return`${j}ms`;let q=Math.floor(j/1000);if(q<60)return`${q}s`;let E=Math.floor(q/60),F=q%60;if(E<60)return`${E}m ${F}s`;let J=Math.floor(E/60),H=E%60;return`${J}h ${H}m`}function A(j,q="cyan"){let E=j.split(`
+`),F=Math.max(...E.map((H)=>H.length)),J="─".repeat(F+2);console.log(K(`┌${J}┐`,q)),E.forEach((H)=>{console.log(K(`│ ${H.padEnd(F)} │`,q))}),console.log(K(`└${J}┘`,q))}async function R(){return!0}async function y(){try{let{AWSClient:j}=await import("./chunk-dbgffky8.js");return await new j().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()}),!0}catch{return!1}}async function C(){try{let{AWSClient:j}=await import("./chunk-dbgffky8.js"),E=await new j().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()});return E.Account||E.GetCallerIdentityResult?.Account||null}catch{return null}}async function V(){try{let{AWSClient:j}=await import("./chunk-dbgffky8.js"),E=await new j().request({service:"ec2",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"DescribeRegions",Version:"2016-11-15"}).toString()}),F=[];if(E.regionInfo){let J=Array.isArray(E.regionInfo)?E.regionInfo:[E.regionInfo];F.push(...J.map((H)=>H.regionName))}return F.length>0?F:X()}catch{return X()}}function X(){return["us-east-1","us-east-2","us-west-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1","ap-northeast-1"]}
+export{B as sg,K as tg,Y as ug,Z as vg,_ as wg,$ as xg,T as yg,L as zg,k as Ag,D as Bg,U as Cg,I as Dg,S as Eg,W as Fg,v as Gg,A as Hg,R as Ig,y as Jg,C as Kg,V as Lg,b as Mg};

package/dist/bin/chunk-2empps47.js

@@ -0,0 +1,2 @@
+import{rg as w}from"./chunk-mr0atd2s.js";import{yg as E}from"./chunk-271gk1n2.js";import{$n as R,Co as u,Ho as D,Io as F,Pn as H,Rn as C}from"./chunk-rxcvf10f.js";import{execFileSync as P}from"node:child_process";import{mkdirSync as _,mkdtempSync as k,rmSync as S,writeFileSync as Z}from"node:fs";import{tmpdir as m}from"node:os";import{dirname as h,join as J}from"node:path";function A(M,q){for(let z of q){let V=J(M,z.name);_(h(V),{recursive:!0}),Z(V,z.data,z.mode?{mode:z.mode}:void 0)}}async function p(M){let{app:q,projectRoot:z,region:V,repository:W}=M,b=q.architecture??"x86_64",f=b==="arm64"?"linux/arm64":"linux/amd64",U=q.kind==="php",K=M.onStep??(()=>{}),N=k(J(m(),"tscloud-img-"));try{let $=J(N,"app");_($,{recursive:!0});let v,B;if(U){D({projectRoot:z,app:q,skipBuild:M.skipBuild,onStep:K}),K("staging application tree");let G=F(z);A($,G),A(J(N,"runtime"),u().map((T)=>({name:T.path,data:T.contents,mode:T.mode})));let O=q.handlers?.http??"public/index.php";v={http:O,queue:q.handlers?.queue??O,cli:q.handlers?.cli??O},B=H(G.map((T)=>`${T.name}:${T.data.length}`).join("|"))}else{K("bundling application");let G=await C({projectRoot:z,app:q,skipBuild:M.skipBuild,onStep:K});Z(J($,"index.mjs"),G.bundle),v=G.handlers,B=G.sha256}let x=B.slice(0,16);Z(J(N,"Dockerfile"),R({kind:q.kind??"node",phpVersion:q.phpVersion,architecture:b}));let I=new w(V),Q;try{Q=(await I.describeRepositories({repositoryNames:[W]})).repositories?.[0]?.repositoryUri??""}catch{Q=""}if(!Q)K(`creating ECR repository ${W}`),Q=(await I.createRepository({repositoryName:W,imageScanningConfiguration:{scanOnPush:!0}})).repository?.repositoryUri??"";if(!Q)throw Error(`could not resolve ECR repository URI for ${W}`);let X=`${Q}:${x}`;K("docker build"),P("docker",["build","--platform",f,"--provenance=false","--sbom=false","-t",X,N],{stdio:"inherit"}),K("ecr auth + push");let Y=(await I.getAuthorizationToken()).authorizationData?.[0];if(!Y?.authorizationToken||!Y.proxyEndpoint)throw Error("failed to get an ECR authorization token");let j=Y.proxyEndpoint.replace(/^https?:\/\//,""),L=J(N,".docker");return _(L,{recursive:!0}),Z(J(L,"config.json"),JSON.stringify({auths:{[j]:{auth:Y.authorizationToken}}})),P("docker",["push",X],{stdio:"inherit",env:{...process.env,DOCKER_CONFIG:L}}),E(`Image: ${X}`),{imageUri:X,tag:x,handlers:v}}finally{S(N,{recursive:!0,force:!0})}}
+export{p as qg};

package/dist/bin/chunk-38pq971s.js

@@ -0,0 +1,2 @@
+function q(b){let g=new RegExp("[\\u007F-\\uFFFF]","g");return JSON.stringify(b).replace(g,(k)=>`\\u${k.charCodeAt(0).toString(16).padStart(4,"0")}`)}
+export{q as Ua};

package/dist/bin/chunk-3gykfyq4.js

@@ -0,0 +1,37 @@
+var Y={mode:"detection",paranoiaLevel:1,inboundThreshold:5,outboundThreshold:4,maxBodyBytes:13107200,rejectOversizedBody:!0,auditLogPath:"/var/log/ts-cloud/waf-audit.log",blockStatus:403},C={bypassBase:1e5,exclusionBase:101000,rateLimitBase:102000,customBase:109000};function X(q){return q.replace(/\\/g,"\\\\").replace(/"/g,"\\\"").replace(/[\r\n]+/g," ")}function W(q){if(q.length>1000)return!1;if(/\([^)]*[+*]\)[+*]/.test(q))return!1;if(/\[[^\]]*\][+*]\{/.test(q))return!1;try{return new RegExp(q),!0}catch{return!1}}function R(q,V){let G=[],K=[],J=V;for(let H of q){if(H.enabled===!1)continue;if(H.key&&(H.key.source==="cookie"||H.key.source==="header")&&!H.key.name){K.push({ruleId:H.id,reason:"The rule keys on a header or cookie but names none."});continue}let $=H.path?_(H.path):".*";if(!W($)){K.push({ruleId:H.id,reason:"The path pattern compiles to an unsafe regular expression."});continue}let Z=[`SecRule REQUEST_URI "@rx ${X($)}"`];if(H.methods?.length)Z.push(`  "chain,id:${J},phase:1,pass,nolog,setvar:'tx.ts_cloud_ratelimit=${X(H.id)}'"`);else Z.push(`  "id:${J},phase:1,pass,nolog,setvar:'tx.ts_cloud_ratelimit=${X(H.id)}'"`);if(G.push(`# Marks requests governed by the ts-cloud rate limit "${X(H.id)}".`),G.push(Z.join(" \\\n")),H.methods?.length)G.push(`  SecRule REQUEST_METHOD "@within ${X(H.methods.join(" ").toUpperCase())}" "t:none"`);G.push(""),J++}return{lines:G,unmapped:K}}function _(q){return`^${q.replace(/[.+^${}()|[\]\\]/g,"\\$&").replace(/\*\*/g,"\x01").replace(/\*/g,"[^/]*").replace(/\u0001/g,".*")}$`}function y(q={},V=[]){let G=q.mode??Y.mode,K=[],J=q.paranoiaLevel??Y.paranoiaLevel,H=q.inboundThreshold??Y.inboundThreshold,$=q.outboundThreshold??Y.outboundThreshold,Z=q.maxBodyBytes??Y.maxBodyBytes,j=q.rejectOversizedBody!==!1;if(G==="blocking"&&J>=3)K.push(`Paranoia level ${J} blocks legitimate traffic on most applications until it is tuned. Run it in detection mode first.`);if(G==="blocking")K.push("zig-waf is pre-alpha. Blocking mode makes it a failure path for every request.");if(!j)K.push("Oversized bodies are passed through uninspected, so padding a request bypasses every rule.");if(q.bypassPaths?.length)K.push(`${q.bypassPaths.length} path(s) bypass inspection entirely.`);let Q=["# Managed by ts-cloud. Edits are overwritten on the next deploy.",`# Mode: ${G}. Paranoia level: ${J}.`,""];if(G==="off")return Q.push("SecRuleEngine Off",""),{config:`${Q.join(`
+`)}
+`,unmappedRateLimits:[],warnings:K,mode:G};Q.push(`SecRuleEngine ${G==="blocking"?"On":"DetectionOnly"}`,"SecRequestBodyAccess On","SecResponseBodyAccess Off",`SecRequestBodyLimit ${Z}`,`SecRequestBodyNoFilesLimit ${Math.min(Z,131072)}`,`SecRequestBodyLimitAction ${j?"Reject":"ProcessPartial"}`,"SecRequestBodyInMemoryLimit 131072",`SecAuditEngine ${G==="blocking"?"RelevantOnly":"On"}`,"SecAuditLogParts ABIJDEFHZ",`SecAuditLog ${X(q.auditLogPath??Y.auditLogPath)}`,"SecAuditLogType Serial",`SecDefaultAction "phase:1,log,auditlog,${G==="blocking"?`deny,status:${q.blockStatus??Y.blockStatus}`:"pass"}"`,"","# CRS anomaly scoring setup.",`SecAction "id:900000,phase:1,pass,nolog,t:none,setvar:tx.paranoia_level=${J}"`,`SecAction "id:900001,phase:1,pass,nolog,t:none,setvar:tx.inbound_anomaly_score_threshold=${H}"`,`SecAction "id:900002,phase:1,pass,nolog,t:none,setvar:tx.outbound_anomaly_score_threshold=${$}"`,'SecAction "id:900003,phase:1,pass,nolog,t:none,setvar:tx.critical_anomaly_score=5,setvar:tx.error_anomaly_score=4,setvar:tx.warning_anomaly_score=3,setvar:tx.notice_anomaly_score=2"','SecAction "id:900004,phase:1,pass,nolog,t:none,setvar:tx.anomaly_score=0"',"");let z=C.bypassBase;for(let N of q.bypassPaths??[]){let k=_(N);if(!W(k)){K.push(`Bypass path "${N}" was dropped: it compiles to an unsafe regular expression.`);continue}Q.push(`# Inspection bypass for ${X(N)}. Every bypass is an unguarded route.`,`SecRule REQUEST_URI "@rx ${X(k)}" "id:${z},phase:1,pass,nolog,ctl:ruleEngine=Off"`,""),z++}let B=C.exclusionBase;for(let N of q.exclusions??[]){if(!Number.isInteger(N.ruleId)||N.ruleId<=0){K.push(`Exclusion with rule id "${N.ruleId}" was dropped: the id is not a positive integer.`);continue}if(Q.push(`# ${X(N.reason)}`),N.pathPattern){if(!W(N.pathPattern)){K.push(`Exclusion for rule ${N.ruleId} was dropped: its path pattern is unsafe.`);continue}Q.push(`SecRule REQUEST_URI "@rx ${X(N.pathPattern)}" "id:${B},phase:1,pass,nolog,ctl:ruleRemoveById=${N.ruleId}"`),B++}else Q.push(`SecRuleRemoveById ${N.ruleId}`);Q.push("")}let M=R(V,C.rateLimitBase);if(M.lines.length>0)Q.push("# Rate-limit route markers. SecLang has no counters, so the tag is set","# here and the counting stays in the ts-cloud limiter.",...M.lines);let O=C.customBase;for(let N of q.customRules??[])Q.push(`# Operator-supplied rule ${O}.`,N.trim(),""),O++;if(G==="blocking")Q.push("# Blocking decision: one rule, at the end, on the accumulated score.",`SecRule TX:ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" "id:949110,phase:2,deny,status:${q.blockStatus??Y.blockStatus},log,msg:'Inbound anomaly score exceeded (total: %{tx.anomaly_score})'"`,"");return{config:`${Q.join(`
+`)}
+`,unmappedRateLimits:M.unmapped,warnings:K,mode:G}}function A(q={},V=[],G={}){let K=G.binary??"/usr/local/bin/zig-waf",J=G.configPath??"/etc/ts-cloud/waf.conf",H=y(q,V);return`#!/usr/bin/env bash
+# Managed by ts-cloud. Installs the zig-waf ruleset.
+set -euo pipefail
+
+if [ ! -x "${K}" ]; then
+  echo "ts-cloud: ${K} is not installed; skipping WAF configuration" >&2
+  exit 0
+fi
+
+install -d -m 0755 "$(dirname "${J}")"
+install -d -m 0750 /var/log/ts-cloud
+
+cat > "${J}.new" <<'WAF_EOF'
+${H.config}WAF_EOF
+
+# Compile the config before it goes live. A config that does not validate
+# would leave the engine with no rules while still reporting itself enabled.
+if ! "${K}" validate "${J}.new"; then
+  echo "ts-cloud: generated WAF config failed validation, keeping the previous one" >&2
+  rm -f "${J}.new"
+  exit 1
+fi
+
+if [ -f "${J}" ] && cmp -s "${J}.new" "${J}"; then
+  rm -f "${J}.new"
+  echo "ts-cloud: WAF config unchanged"
+  exit 0
+fi
+
+mv "${J}.new" "${J}"
+echo "ts-cloud: WAF config installed (mode: ${H.mode})"
+`}function F(q,V){return q.map((G)=>({projectId:V.projectId,environmentId:V.environmentId,resourceId:V.resourceId,kind:"event",source:"zig-waf",name:G.action==="blocked"?"waf.blocked":"waf.matched",timestamp:G.timestamp,value:1,host:G.host,pathTemplate:G.path,method:G.method,attributes:{ruleId:G.ruleId??null,anomalyScore:G.anomalyScore,action:G.action,messages:G.messages.slice(0,5)}}))}
+export{X as Je,W as Ke,_ as Le,y as Me,A as Ne,F as Oe};

package/dist/bin/chunk-3vqfexc4.js

@@ -0,0 +1,70 @@
+import{qh as T}from"./chunk-rxcvf10f.js";import"./chunk-mh0kdzqp.js";function _(q){let j=q.sites||{};for(let D of Object.values(j))if(D?.repository?.url)return{provider:D.repository.provider,branch:D.repository.branch};return}function x(q){let j=q.trim().toLowerCase();if(j.includes("github.com"))return"github";if(j.includes("gitlab.com"))return"gitlab";if(j.includes("bitbucket.org"))return"bitbucket";return}function Q(q){return`'${q.replace(/'/g,"'\\''")}'`}function $(q){return q.replace(/'/g,"''")}function k(q,j){let D=["bunx --bun @stacksjs/ts-cloud deploy","--env",Q(q)];if(j.site)D.push("--site",Q(j.site));if(j.skipDnsVerification)D.push("--skip-dns-verification");return D.push("--yes"),D.join(" ")}function I(q,j="production",D={}){let N=_(q),F=D.provider||N?.provider;if(F!=="github"&&F!=="gitlab"&&F!=="bitbucket")return null;let G=q.environments?.[j],H=G?.deployBranch||N?.branch||"main",L=k(j,D),M=JSON.stringify(H),V=JSON.stringify(j),O=G?.domain?G.domain.startsWith("http")?G.domain:`https://${G.domain}`:void 0,W=O?`
+      url: ${JSON.stringify(O)}`:"",X=D.setup==="pantry"?`      - name: Setup Pantry
+        uses: home-lang/pantry/packages/action@main`:`      - uses: oven-sh/setup-bun@v2
+      - run: bun install --frozen-lockfile`,Y=T(q)==="hetzner"&&!!q.infrastructure?.compute,J=D.sshPrivateKeySecret||"SSH_PRIVATE_KEY";if(!/^[A-Z_][A-Z0-9_]*$/i.test(J))throw Error(`Invalid SSH private key secret name '${J}'`);let Z=Y?`
+      - name: Configure deployment SSH key
+        env:
+          SSH_PRIVATE_KEY: \${{ secrets.${J} }}
+        run: |
+          if [ -z "$SSH_PRIVATE_KEY" ]; then
+            echo "::error::${J} is required for Hetzner compute deployments"
+            exit 1
+          fi
+          install -d -m 700 "$HOME/.ssh"
+          printf '%s\\n' "$SSH_PRIVATE_KEY" | tr -d '\\r' > "$HOME/.ssh/id_ed25519"
+          chmod 600 "$HOME/.ssh/id_ed25519"
+          ssh-keygen -y -f "$HOME/.ssh/id_ed25519" > "$HOME/.ssh/id_ed25519.pub"
+`:"";if(F==="github")return{provider:F,branch:H,path:".github/workflows/deploy.yml",content:`name: Deploy ${j}
+run-name: Deploy ${j} from \${{ github.ref_name }}
+
+on:
+  push:
+    branches: [${M}]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ts-cloud-${j}
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    if: github.ref_name == '${$(H)}'
+    runs-on: ubuntu-latest
+    environment:
+      name: ${V}${W}
+    steps:
+      - uses: actions/checkout@v6
+${X}
+${Z}
+      # Provide the provider credentials your config needs as repo secrets.
+      - run: ${L}
+        env:
+          HCLOUD_TOKEN: \${{ secrets.HCLOUD_TOKEN }}
+          HETZNER_API_TOKEN: \${{ secrets.HETZNER_API_TOKEN }}
+          AWS_ACCESS_KEY_ID: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          TS_CLOUD_UI_DISABLE: '1'
+`};if(F==="gitlab")return{provider:F,branch:H,path:".gitlab-ci.yml",content:`deploy:
+  image: oven/bun:latest
+  rules:
+    - if: '$CI_COMMIT_BRANCH == ${M}'
+  environment: ${j}
+  script:
+    - bun install --frozen-lockfile
+    - ${L}
+  # Set HCLOUD_TOKEN / HETZNER_API_TOKEN / AWS credentials as CI variables.
+`};return{provider:F,branch:H,path:"bitbucket-pipelines.yml",content:`pipelines:
+  branches:
+    ${M}:
+      - step:
+          name: Deploy ${j}
+          deployment: ${j}
+          image: oven/bun:latest
+          script:
+            - bun install --frozen-lockfile
+            - ${L}
+          # Set HCLOUD_TOKEN / HETZNER_API_TOKEN / AWS credentials as repo variables.
+`}}export{x as inferQuickDeployProvider,I as buildQuickDeployCi};

package/dist/bin/chunk-4vrqm9h0.js

@@ -0,0 +1,2 @@
+import{Og as E}from"./chunk-fpm59y25.js";class J{client;region;constructor(b="us-east-1",w){this.region=b,this.client=new E}async createQueue(b){let h={Action:"CreateQueue",QueueName:b.fifo&&!b.queueName.endsWith(".fifo")?`${b.queueName}.fifo`:b.queueName,Version:"2012-11-05"},j=1;if(b.visibilityTimeout!==void 0)h[`Attribute.${j}.Name`]="VisibilityTimeout",h[`Attribute.${j}.Value`]=b.visibilityTimeout.toString(),j++;if(b.messageRetentionPeriod!==void 0)h[`Attribute.${j}.Name`]="MessageRetentionPeriod",h[`Attribute.${j}.Value`]=b.messageRetentionPeriod.toString(),j++;if(b.delaySeconds!==void 0)h[`Attribute.${j}.Name`]="DelaySeconds",h[`Attribute.${j}.Value`]=b.delaySeconds.toString(),j++;if(b.maxMessageSize!==void 0)h[`Attribute.${j}.Name`]="MaximumMessageSize",h[`Attribute.${j}.Value`]=b.maxMessageSize.toString(),j++;if(b.receiveMessageWaitTime!==void 0)h[`Attribute.${j}.Name`]="ReceiveMessageWaitTimeSeconds",h[`Attribute.${j}.Value`]=b.receiveMessageWaitTime.toString(),j++;if(b.fifo){if(h[`Attribute.${j}.Name`]="FifoQueue",h[`Attribute.${j}.Value`]="true",j++,b.contentBasedDeduplication)h[`Attribute.${j}.Name`]="ContentBasedDeduplication",h[`Attribute.${j}.Value`]="true",j++}if(b.deadLetterTargetArn&&b.maxReceiveCount)h[`Attribute.${j}.Name`]="RedrivePolicy",h[`Attribute.${j}.Value`]=JSON.stringify({deadLetterTargetArn:b.deadLetterTargetArn,maxReceiveCount:b.maxReceiveCount}),j++;if(b.tags&&Object.keys(b.tags).length>0){let B=1;for(let[F,G]of Object.entries(b.tags))h[`Tag.${B}.Key`]=F,h[`Tag.${B}.Value`]=G,B++}let z=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(h).toString()});return{QueueUrl:z.QueueUrl||z.CreateQueueResult?.QueueUrl}}async listQueues(b){let w={Action:"ListQueues",Version:"2012-11-05"};if(b)w.QueueNamePrefix=b;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()}),j=[];if(h.QueueUrl)j.push(h.QueueUrl);else if(h.ListQueuesResult?.QueueUrl)if(Array.isArray(h.ListQueuesResult.QueueUrl))j.push(...h.ListQueuesResult.QueueUrl);else j.push(h.ListQueuesResult.QueueUrl);return{QueueUrls:j}}async getQueueAttributes(b){let w={Action:"GetQueueAttributes",QueueUrl:b,Version:"2012-11-05","AttributeName.1":"All"},h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{Attributes:h.Attributes||h.GetQueueAttributesResult?.Attributes||{}}}async getQueueUrl(b){let w={Action:"GetQueueUrl",QueueName:b,Version:"2012-11-05"},h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{QueueUrl:h.QueueUrl||h.GetQueueUrlResult?.QueueUrl}}async deleteQueue(b){let w={Action:"DeleteQueue",QueueUrl:b,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()})}async purgeQueue(b){let w={Action:"PurgeQueue",QueueUrl:b,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()})}async sendMessage(b){let w={Action:"SendMessage",QueueUrl:b.queueUrl,MessageBody:b.messageBody,Version:"2012-11-05"};if(b.delaySeconds!==void 0)w.DelaySeconds=b.delaySeconds;if(b.messageGroupId)w.MessageGroupId=b.messageGroupId;if(b.messageDeduplicationId)w.MessageDeduplicationId=b.messageDeduplicationId;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{MessageId:h.MessageId||h.SendMessageResult?.MessageId}}async receiveMessages(b){let w={Action:"ReceiveMessage",QueueUrl:b.queueUrl,Version:"2012-11-05"};if(b.maxMessages!==void 0)w.MaxNumberOfMessages=b.maxMessages;if(b.visibilityTimeout!==void 0)w.VisibilityTimeout=b.visibilityTimeout;if(b.waitTimeSeconds!==void 0)w.WaitTimeSeconds=b.waitTimeSeconds;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()}),j=[],z=h.Message||h.ReceiveMessageResult?.Message;if(z)if(Array.isArray(z))j.push(...z.map((B)=>({MessageId:B.MessageId,ReceiptHandle:B.ReceiptHandle,Body:B.Body})));else j.push({MessageId:z.MessageId,ReceiptHandle:z.ReceiptHandle,Body:z.Body});return{Messages:j}}async deleteMessage(b,w){let h={Action:"DeleteMessage",QueueUrl:b,ReceiptHandle:w,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(h).toString()})}}
+export{J as yd};

package/dist/bin/chunk-598yf4bs.js

@@ -0,0 +1 @@
+import{$f as a}from"./chunk-fy8j3y8p.js";import"./chunk-fpm59y25.js";import"./chunk-mh0kdzqp.js";export{a as S3Client};

package/dist/bin/chunk-5ectjq0b.js

@@ -0,0 +1 @@
+import{xd as a}from"./chunk-vm3q5gf2.js";import"./chunk-4vrqm9h0.js";import"./chunk-mz0wbbsj.js";import"./chunk-p66ptpmr.js";import"./chunk-axhnkn5g.js";import"./chunk-h5pa5men.js";import"./chunk-fy8j3y8p.js";import"./chunk-271gk1n2.js";import"./chunk-fpm59y25.js";import"./chunk-rxcvf10f.js";import"./chunk-mh0kdzqp.js";export{a as resolveDashboardData};