@stacksjs/ts-cloud 0.9.4 → 0.10.0

package/dist/bin/chunk-m7dgskt1.js

@@ -1 +0,0 @@
-import{od as a,pd as b,qd as c,rd as d}from"./chunk-y7s5r8y6.js";import"./chunk-tga3hhwk.js";import"./chunk-rxcvf10f.js";import"./chunk-mh0kdzqp.js";export{c as runComputeRecipe,a as rollbackComputeSite,d as restoreDatabaseBackup,b as getComputeDeployHistory};

package/dist/bin/chunk-mr0atd2s.js

@@ -1,2 +0,0 @@
-import{Og as w}from"./chunk-fpm59y25.js";class x{client;region;constructor(b="us-east-1",j){this.region=b,this.client=new w(void 0,{profile:j})}async createRepository(b){let j={repositoryName:b.repositoryName};if(b.imageTagMutability)j.imageTagMutability=b.imageTagMutability;if(b.imageScanningConfiguration)j.imageScanningConfiguration=b.imageScanningConfiguration;if(b.encryptionConfiguration)j.encryptionConfiguration=b.encryptionConfiguration;if(b.tags&&b.tags.length>0)j.tags=b.tags;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.CreateRepository","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{repository:q.repository?this.parseRepository(q.repository):void 0}}async describeRepositories(b){let j={};if(b?.repositoryNames&&b.repositoryNames.length>0)j.repositoryNames=b.repositoryNames;if(b?.registryId)j.registryId=b.registryId;if(b?.maxResults)j.maxResults=b.maxResults;if(b?.nextToken)j.nextToken=b.nextToken;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.DescribeRepositories","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{repositories:q.repositories?.map((v)=>this.parseRepository(v)),nextToken:q.nextToken}}async getAuthorizationToken(b){let j={};if(b&&b.length>0)j.registryIds=b;return{authorizationData:(await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.GetAuthorizationToken","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)})).authorizationData?.map((v)=>({authorizationToken:v.authorizationToken,expiresAt:v.expiresAt,proxyEndpoint:v.proxyEndpoint}))}}async deleteRepository(b){let j={repositoryName:b.repositoryName};if(b.registryId)j.registryId=b.registryId;if(b.force!==void 0)j.force=b.force;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.DeleteRepository","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{repository:q.repository?this.parseRepository(q.repository):void 0}}async describeImages(b){let j={repositoryName:b.repositoryName};if(b.registryId)j.registryId=b.registryId;if(b.imageIds&&b.imageIds.length>0)j.imageIds=b.imageIds;if(b.filter)j.filter=b.filter;if(b.maxResults)j.maxResults=b.maxResults;if(b.nextToken)j.nextToken=b.nextToken;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.DescribeImages","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{imageDetails:q.imageDetails?.map((v)=>this.parseImageDetail(v)),nextToken:q.nextToken}}async batchDeleteImage(b){let j={repositoryName:b.repositoryName,imageIds:b.imageIds};if(b.registryId)j.registryId=b.registryId;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.BatchDeleteImage","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{imageIds:q.imageIds,failures:q.failures}}async putLifecyclePolicy(b){let j={repositoryName:b.repositoryName,lifecyclePolicyText:b.lifecyclePolicyText};if(b.registryId)j.registryId=b.registryId;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.PutLifecyclePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{registryId:q.registryId,repositoryName:q.repositoryName,lifecyclePolicyText:q.lifecyclePolicyText}}async getLifecyclePolicy(b){let j={repositoryName:b.repositoryName};if(b.registryId)j.registryId=b.registryId;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.GetLifecyclePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{registryId:q.registryId,repositoryName:q.repositoryName,lifecyclePolicyText:q.lifecyclePolicyText,lastEvaluatedAt:q.lastEvaluatedAt}}async setRepositoryPolicy(b){let j={repositoryName:b.repositoryName,policyText:b.policyText};if(b.registryId)j.registryId=b.registryId;if(b.force!==void 0)j.force=b.force;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.SetRepositoryPolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{registryId:q.registryId,repositoryName:q.repositoryName,policyText:q.policyText}}async getRepositoryPolicy(b){let j={repositoryName:b.repositoryName};if(b.registryId)j.registryId=b.registryId;let q=await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.GetRepositoryPolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)});return{registryId:q.registryId,repositoryName:q.repositoryName,policyText:q.policyText}}async tagResource(b){let j={resourceArn:b.resourceArn,tags:b.tags};await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.TagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)})}async listTagsForResource(b){let j={resourceArn:b};return{tags:(await this.client.request({service:"ecr",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"AmazonEC2ContainerRegistry_V20150921.ListTagsForResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(j)})).tags}}createLifecyclePolicyText(b){return JSON.stringify({rules:b.map((j)=>({rulePriority:j.rulePriority,description:j.description,selection:j.selection,action:j.action}))})}async getDockerLoginCommand(){let b=await this.getAuthorizationToken();if(!b.authorizationData?.[0])throw Error("Failed to get authorization token");let j=b.authorizationData[0],q=j.authorizationToken||"",v=j.proxyEndpoint||"";return`echo "${Buffer.from(q,"base64").toString("utf8").split(":")[1]}" | docker login --username AWS --password-stdin ${v}`}getRegistryUri(b){return`${b}.dkr.ecr.${this.region}.amazonaws.com`}parseRepository(b){return{repositoryArn:b.repositoryArn,registryId:b.registryId,repositoryName:b.repositoryName,repositoryUri:b.repositoryUri,createdAt:b.createdAt,imageTagMutability:b.imageTagMutability,imageScanningConfiguration:b.imageScanningConfiguration,encryptionConfiguration:b.encryptionConfiguration}}parseImageDetail(b){return{registryId:b.registryId,repositoryName:b.repositoryName,imageDigest:b.imageDigest,imageTags:b.imageTags,imageSizeInBytes:b.imageSizeInBytes,imagePushedAt:b.imagePushedAt,imageScanStatus:b.imageScanStatus,imageScanFindingsSummary:b.imageScanFindingsSummary}}}
-export{x as rg};

package/dist/bin/chunk-mz0wbbsj.js

@@ -1,3 +0,0 @@
-import{Rd as E}from"./chunk-p66ptpmr.js";import{Uf as n}from"./chunk-h5pa5men.js";import{$f as C}from"./chunk-fy8j3y8p.js";import{Ag as m,Hg as Zz,ug as k,vg as Xz,wg as l,yg as F,zg as Y}from"./chunk-271gk1n2.js";import{Og as Jz}from"./chunk-fpm59y25.js";import{Do as Yz,Gh as $z,Hh as Wz,Ih as Mz,Jo as Hz,Qn as Oz,Rn as _z,Tn as Kz,Vn as Qz,Wn as jz}from"./chunk-rxcvf10f.js";import{Vo as t}from"./chunk-mh0kdzqp.js";import{existsSync as Lz,readdirSync as Uz,readFileSync as Bz,statSync as Ez}from"node:fs";import{join as Pz,relative as Rz}from"node:path";class d{client;region;constructor(z="us-east-1",G){this.region=z,this.client=new Jz}async createSecret(z){let G={Name:z.Name};if(z.Description)G.Description=z.Description;if(z.KmsKeyId)G.KmsKeyId=z.KmsKeyId;if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;if(z.Tags&&z.Tags.length>0)G.Tags=z.Tags;if(z.AddReplicaRegions&&z.AddReplicaRegions.length>0)G.AddReplicaRegions=z.AddReplicaRegions;if(z.ForceOverwriteReplicaSecret!==void 0)G.ForceOverwriteReplicaSecret=z.ForceOverwriteReplicaSecret;G.ClientRequestToken=z.ClientRequestToken||crypto.randomUUID();let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CreateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,ReplicationStatus:J.ReplicationStatus}}async updateSecret(z){let G={SecretId:z.SecretId};if(z.Description)G.Description=z.Description;if(z.KmsKeyId)G.KmsKeyId=z.KmsKeyId;if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UpdateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId}}async putSecretValue(z){let G={SecretId:z.SecretId};if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;if(z.VersionStages&&z.VersionStages.length>0)G.VersionStages=z.VersionStages;if(z.ClientRequestToken)G.ClientRequestToken=z.ClientRequestToken;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,VersionStages:J.VersionStages}}async getSecretValue(z){let G={SecretId:z.SecretId};if(z.VersionId)G.VersionId=z.VersionId;if(z.VersionStage)G.VersionStage=z.VersionStage;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,SecretBinary:J.SecretBinary,SecretString:J.SecretString,VersionStages:J.VersionStages,CreatedDate:J.CreatedDate}}async describeSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DescribeSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return this.parseSecret(J)}async listSecrets(z){let G={};if(z?.MaxResults)G.MaxResults=z.MaxResults;if(z?.NextToken)G.NextToken=z.NextToken;if(z?.Filters&&z.Filters.length>0)G.Filters=z.Filters;if(z?.SortOrder)G.SortOrder=z.SortOrder;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.ListSecrets","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{SecretList:J.SecretList?.map((X)=>this.parseSecret(X)),NextToken:J.NextToken}}async deleteSecret(z){let G={SecretId:z.SecretId};if(z.RecoveryWindowInDays!==void 0)G.RecoveryWindowInDays=z.RecoveryWindowInDays;if(z.ForceDeleteWithoutRecovery!==void 0)G.ForceDeleteWithoutRecovery=z.ForceDeleteWithoutRecovery;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,DeletionDate:J.DeletionDate}}async restoreSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RestoreSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async rotateSecret(z){let G={SecretId:z.SecretId};if(z.ClientRequestToken)G.ClientRequestToken=z.ClientRequestToken;if(z.RotationLambdaARN)G.RotationLambdaARN=z.RotationLambdaARN;if(z.RotationRules)G.RotationRules=z.RotationRules;if(z.RotateImmediately!==void 0)G.RotateImmediately=z.RotateImmediately;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId}}async cancelRotateSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CancelRotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async getResourcePolicy(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,ResourcePolicy:J.ResourcePolicy}}async putResourcePolicy(z){let G={SecretId:z.SecretId,ResourcePolicy:z.ResourcePolicy};if(z.BlockPublicPolicy!==void 0)G.BlockPublicPolicy=z.BlockPublicPolicy;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async deleteResourcePolicy(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async tagResource(z){let G={SecretId:z.SecretId,Tags:z.Tags};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.TagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)})}async untagResource(z){let G={SecretId:z.SecretId,TagKeys:z.TagKeys};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UntagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)})}async setString(z,G,J){try{let X=await this.putSecretValue({SecretId:z,SecretString:G});return{ARN:X.ARN,VersionId:X.VersionId}}catch(X){if(X.code==="ResourceNotFoundException"){let Z=await this.createSecret({Name:z,SecretString:G,Description:J?.description,KmsKeyId:J?.kmsKeyId,Tags:J?.tags});return{ARN:Z.ARN,VersionId:Z.VersionId}}throw X}}async setJson(z,G,J){return this.setString(z,JSON.stringify(G),J)}async getString(z){return(await this.getSecretValue({SecretId:z})).SecretString}async getJson(z){let G=await this.getString(z);if(G)return JSON.parse(G);return}async listAll(){let z=[],G;do{let J=await this.listSecrets({NextToken:G});if(J.SecretList)z.push(...J.SecretList);G=J.NextToken}while(G);return z}parseSecret(z){return{ARN:z.ARN,Name:z.Name,Description:z.Description,KmsKeyId:z.KmsKeyId,RotationEnabled:z.RotationEnabled,RotationLambdaARN:z.RotationLambdaARN,RotationRules:z.RotationRules,LastRotatedDate:z.LastRotatedDate,LastChangedDate:z.LastChangedDate,LastAccessedDate:z.LastAccessedDate,DeletedDate:z.DeletedDate,NextRotationDate:z.NextRotationDate,Tags:z.Tags,SecretVersionsToStages:z.SecretVersionsToStages,CreatedDate:z.CreatedDate,PrimaryRegion:z.PrimaryRegion}}}function q(z,G){let J=z.environments?.[G]?.app;if(!J)throw Error(`No serverless app configured for environment '${G}'. Add environments.${G}.app to your config.`);let X=z.project.slug,Z=z.environments?.[G]?.region||z.project.region||"us-east-1";return{app:J,slug:X,region:Z,stackName:$z(z,G),artifactBucket:Wz(X,G),assetsBucket:Mz(X,G)}}function iz(z,G){let J=q(z,G),X=`${J.slug}-${G}`;return{region:J.region,slug:J.slug,stackName:J.stackName,functions:{http:`${X}-http`,queue:`${X}-queue`,cli:`${X}-cli`}}}async function N(z,G=8){let J;for(let X=0;X<G;X++)try{return await z()}catch(Z){let $=Z?.code||Z?.name||"",W=String(Z?.message||"");if($==="ResourceConflictException"||/update is in progress|currently in the following state/i.test(W)){J=Z,await new Promise((M)=>setTimeout(M,3000));continue}throw Z}throw J}var Tz=(z,G)=>`releases/${z}/${G}/current.json`;async function p(z,G,J,X){try{return await z.getObjectJson(G,Tz(J,X))}catch{return null}}async function Vz(z,G,J,X,Z){await z.putObjectJson(G,Tz(J,X),Z)}async function hz(z,G){if(!z.secrets)return{};let J=new d(G),X={},Z=Array.isArray(z.secrets)?z.secrets.map(($)=>({envName:$.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g,"_"),secretId:$})):Object.entries(z.secrets).map(([$,W])=>({envName:$,secretId:W}));if(Array.isArray(z.secrets)){let $=new Map;for(let{envName:M,secretId:O}of Z)$.set(M,[...$.get(M)??[],O]);let W=[...$.entries()].filter(([,M])=>M.length>1);if(W.length){let M=W.map(([O,K])=>`${O} ← ${K.join(", ")}`).join("; ");throw Error(`serverless secrets: multiple secrets map to the same env var (${M}). Use the map form { ENV_NAME: 'secret/id' } to disambiguate.`)}}for(let{envName:$,secretId:W}of Z){let O=(await J.getSecretValue({SecretId:W})).SecretString??"";try{let K=JSON.parse(O);if(K&&typeof K==="object"&&!Array.isArray(K)){for(let[H,j]of Object.entries(K))X[H]=String(j);continue}}catch{}X[$]=O}return X}function Iz(z,G){let J={},X=G.DbProxyEndpoint||G.DbEndpoint;if(X)J.DB_CONNECTION="mysql",J.DB_HOST=X,J.DB_PORT="3306",J.DB_DATABASE=J.DB_DATABASE||"app";if(G.CacheEndpoint){if(J.REDIS_HOST=G.CacheEndpoint,J.REDIS_PORT="6379",z.cache?.driver==="elasticache")J.CACHE_STORE="redis",J.CACHE_DRIVER="redis",J.SESSION_DRIVER="redis"}return J}function o(z,G,J,X,Z,$,W,M={}){let O=z.kind==="php"?Yz({cacheDriver:z.cache?.driver==="elasticache"?"redis":"dynamodb"}):{};return{TSCLOUD_LAMBDA_MODE:X,TSCLOUD_ENV:J,MAINTENANCE_MODE:"0",...z.octane?{TSCLOUD_OCTANE:"1"}:{},...z.serveAssets?{TSCLOUD_SERVE_ASSETS:"1"}:{},...z.redirectRobotsTxt===!1?{TSCLOUD_REDIRECT_ROBOTS_TXT:"0"}:{},...O,...M,...G.app.cache?.driver!=="elasticache"?{TSCLOUD_CACHE_TABLE:`${G.slug}-${J}-cache`}:{},...W?{TSCLOUD_QUEUE:W,SQS_QUEUE:W}:{},...$?{ASSET_URL:$}:{},...z.env??{},...Z}}function Nz(z){let G=z.slice(z.lastIndexOf(".")).toLowerCase();return{".html":"text/html",".css":"text/css",".js":"text/javascript",".mjs":"text/javascript",".json":"application/json",".svg":"image/svg+xml",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".webp":"image/webp",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".txt":"text/plain",".map":"application/json"}[G]??"application/octet-stream"}function*Fz(z){for(let G of Uz(z)){let J=Pz(z,G);if(Ez(J).isDirectory())yield*Fz(J);else yield J}}async function Cz(z,G,J,X,Z=!1){let $=0;for(let W of Fz(J)){let M=Rz(J,W).replace(/\\/g,"/");if(!Z&&M.split("/").some((O)=>O.startsWith(".")))continue;await z.putObject({bucket:G,key:`${X}/${M}`,body:Bz(W),contentType:Nz(W),cacheControl:"public, max-age=31536000, immutable"}),$++}return $}function Sz(z,G){let J=Object.entries(G).reduce((X,[Z,$])=>X+Buffer.byteLength(`${Z}=${$}`,"utf8"),0);if(J>4096){let X=Object.entries(G).map(([Z,$])=>[Z,Buffer.byteLength(`${Z}=${$}`,"utf8")]).sort((Z,$)=>$[1]-Z[1]).slice(0,5).map(([Z,$])=>`${Z} (${$}B)`).join(", ");throw Error(`${z}: environment variables total ${J}B, over AWS's 4096B limit (${J-4096}B too large). Largest: ${X}. Move large/secret values out of env — store them in Secrets Manager and fetch at cold start.`)}}async function b(z,G,J,X){Sz(G,J),await N(()=>z.updateFunctionConfiguration({FunctionName:G,Environment:{Variables:J}})),await z.waitForFunctionActive(G,120);let Z=X.kind==="image"?{FunctionName:G,ImageUri:X.imageUri}:{FunctionName:G,S3Bucket:X.bucket,S3Key:X.key};await N(()=>z.updateFunctionCode(Z)),await z.waitForFunctionActive(G,120)}async function c(z,G){let X=(await N(()=>z.publishVersion({FunctionName:G}))).Version;if(!X)throw Error(`publishVersion returned no version for ${G}`);return await N(()=>z.updateAlias({FunctionName:G,Name:"live",FunctionVersion:X})),X}async function rz(z,G,J={}){let X=q(z,G),{app:Z,slug:$,region:W,stackName:M,artifactBucket:O}=X,K=J.projectRoot??process.cwd();m(`Deploying serverless app: ${$} (${G})`),F(`Stack: ${M}`),F(`Region: ${W}`);let H=new C(W),j=new n(W),V=new E(W),L=Z.kind==="php",U=Z.packaging==="image",Q=Kz(Z),R,A,w,i,g=[];if(U&&Q.usesLayer&&Q.layerKind!=="php")throw Error(`packaging: 'image' currently supports PHP and managed Node runtimes. ${Q.kind}${Q.kind==="node"?` ${Q.version}`:""} uses a custom runtime — `+"use the default zip packaging (the runtime layer is built + attached automatically).");if(U){Y("Building + pushing container image");let{buildAndPushServerlessImage:_}=await import("./chunk-00kg80qg.js"),P=await _({app:Z,projectRoot:K,region:W,repository:`${$}-${G}`,skipBuild:J.skipBuild,onStep:(D)=>F(`  ${D}`)});R=P.handlers,A={kind:"image",imageUri:P.imageUri},w=P.tag,g.push({ParameterKey:"ImageUri",ParameterValue:P.imageUri})}else{Y("Packaging application");let _=L?Hz({projectRoot:K,app:Z,skipBuild:J.skipBuild,onStep:(B)=>F(`  ${B}`)}):await _z({projectRoot:K,app:Z,skipBuild:J.skipBuild,onStep:(B)=>F(`  ${B}`)}),P=Oz($,G,_.sha256);if(F(`Artifact: ${_.sha256.slice(0,12)} (${(_.zip.length/1024).toFixed(0)} KB)`),R=_.handlers,w=_.sha256,Q.usesLayer){let B=Q.layerEnvVar?process.env[Q.layerEnvVar]:void 0;if(i=Z.layers??(B?[B]:void 0),!i?.length){let Dz=Q.layerKind==="php"?"serverless:build-php-layer":Q.layerKind==="bun"?"serverless:build-bun-layer":"serverless:build-node-layer";throw Error(`${Q.kind} apps on provided.al2023 need a runtime layer. Set environments.<env>.app.layers or the ${Q.layerEnvVar} env var (build one with \`cloud ${Dz}\`)${Q.kind==="node"?", or use a managed Node version (18/20/22)":""}.`)}}if(!await H.bucketExists(O))Y(`Creating artifact bucket ${O}`),await H.createBucket(O);if(await H.headObject(O,P).then((B)=>B!==null).catch(()=>!1))F("Artifact already uploaded — reusing");else Y("Uploading artifact"),await H.putObject({bucket:O,key:P,body:_.zip,contentType:"application/zip"});A={kind:"zip",bucket:O,key:P},g.push({ParameterKey:"ArtifactBucket",ParameterValue:O},{ParameterKey:"ArtifactKey",ParameterValue:P})}let T=jz({config:z,environment:G,app:Z,handlers:R,runtimeLayers:i}),e=JSON.stringify(T.template),zz=["CAPABILITY_NAMED_IAM"],S=await j.describeStacks({stackName:M}).then((_)=>_.Stacks[0]?.StackStatus).catch(()=>{return}),f=S!==void 0;if(S&&/DELETE_IN_PROGRESS/.test(S))Y("Waiting for an in-progress stack delete to finish"),await j.waitForStack(M,"stack-delete-complete").catch(()=>{}),f=!1;else if(S&&/(?:ROLLBACK_COMPLETE|REVIEW_IN_PROGRESS|CREATE_FAILED)/.test(S))Y(`Deleting unusable stack (status ${S}) before recreate`),await j.deleteStack(M),await j.waitForStack(M,"stack-delete-complete").catch(()=>{}),f=!1;Y(f?"Updating infrastructure stack":"Creating infrastructure stack");try{if(f)await j.updateStack({stackName:M,templateBody:e,parameters:g,capabilities:zz}),await j.waitForStack(M,"stack-update-complete");else await j.createStack({stackName:M,templateBody:e,parameters:g,capabilities:zz,onFailure:"DELETE"}),await j.waitForStack(M,"stack-create-complete")}catch(_){if(/No updates are to be performed/i.test(String(_?.message)))F("No infrastructure changes");else throw _}let r=await j.getStackOutputs(M).catch(()=>({})),h;if(Z.assets){let _=Pz(K,Z.assets);if(Lz(_)){let P=Z.assetDomain||r.AssetsCdnDomain;h=P?`https://${P}/${w}`:void 0,Y(`Syncing assets from ${Z.assets}`);let D=await Cz(H,X.assetsBucket,_,w,Z.dotFilesAsAssets);F(`Uploaded ${D} asset(s)${h?` → ${h}`:""}`)}else l(`Assets directory not found: ${_}`)}Y("Resolving secrets");let x=await hz(Z,W);if(Z.database?.connection==="aurora-serverless")try{let P=await new d(W).getSecretValue({SecretId:`${$}/${G}/db`}),D=JSON.parse(P.SecretString??"{}");if(D.username)x.DB_USERNAME=D.username;if(D.password)x.DB_PASSWORD=D.password}catch(_){l(`Could not resolve Aurora DB credentials: ${_.message}`)}if(!await H.bucketExists(O))await H.createBucket(O);let v=await p(H,O,$,G),I={},a=T.queueNames[0],s=Iz(Z,r);if(Y("Activating functions"),I.http=o(Z,X,G,"http",x,h,a,s),await b(V,T.functionNames.http,I.http,A),I.cli=o(Z,X,G,"cli",x,h,a,s),await b(V,T.functionNames.cli,I.cli,A),T.queueNames.length)I.queue=o(Z,X,G,"queue",x,h,a,s),await b(V,T.functionNames.queue,I.queue,A);let Gz=(Z.provisionedConcurrency??0)>0,u={};if(Gz){if(Y("Publishing versions + flipping live alias"),u.http=await c(V,T.functionNames.http),u.cli=await c(V,T.functionNames.cli),T.queueNames.length)u.queue=await c(V,T.functionNames.queue)}if(await Vz(H,O,$,G,{sha:w,code:A,previousSha:v?.sha,previousCode:v?.code,previousFunctionEnv:v?.functionEnv,...Gz?{functionVersions:u,previousFunctionVersions:v?.functionVersions}:{},functionEnv:I,functionNames:{http:T.functionNames.http,cli:T.functionNames.cli,...T.queueNames.length?{queue:T.functionNames.queue}:{}},assetUrl:h,timestamp:new Date().toISOString()}),!J.skipDeployHooks&&Z.deploy?.length){Y("Running deploy hooks");for(let _ of Z.deploy){F(`  deploy: ${_}`);let P=await V.invoke({FunctionName:T.functionNames.cli,InvocationType:"RequestResponse",Payload:{command:_},LogType:"Tail"});if(P.FunctionError)throw Xz("Deploy hook failed — the new build is ALREADY LIVE."),F(`  Roll back with: cloud serverless:rollback --env ${G}`),Error(`Deploy hook failed (${_}): ${P.Payload}`)}}let y=r.HttpApiEndpoint;if(!J.skipHealthCheck&&y){Y("Health check");try{let _=await fetch(y,{method:"GET"});F(`GET ${y} → ${_.status}`)}catch(_){l(`Health check could not reach ${y}: ${_.message}`)}}Zz(["Serverless deploy complete","",y?`URL:   ${y}`:"",`Stack: ${M}`,`Build: ${w.slice(0,12)}`].filter(Boolean).join(`
-`),"green")}async function az(z,G){let J=q(z,G),X=new C(J.region),Z=new E(J.region),$=await p(X,J.artifactBucket,J.slug,G);if(!$)throw Error("No previous release to redeploy. Run a full deploy first.");m(`Redeploying ${J.slug} (${G}) — build ${$.sha.slice(0,12)}`);for(let[W,M]of Object.entries($.functionNames)){if(!M)continue;Y(`Re-activating ${W} (${M})`),await b(Z,M,$.functionEnv[W]??{},$.code);let O=$.functionVersions?.[W];if(O)await N(()=>Z.updateAlias({FunctionName:M,Name:"live",FunctionVersion:O}))}k("Redeploy complete")}async function sz(z,G){let J=q(z,G),X=new C(J.region),Z=new E(J.region),$=await p(X,J.artifactBucket,J.slug,G);if(!$?.previousCode)throw Error("No previous release to roll back to.");m(`Rolling back ${J.slug} (${G}) → ${$.previousSha?.slice(0,12)}`);for(let[W,M]of Object.entries($.functionNames)){if(!M)continue;Y(`Restoring ${W} (${M})`);let O=$.previousFunctionEnv?.[W]??$.functionEnv[W]??{};await b(Z,M,O,$.previousCode);let K=$.previousFunctionVersions?.[W];if(K)await N(()=>Z.updateAlias({FunctionName:M,Name:"live",FunctionVersion:K}))}await Vz(X,J.artifactBucket,J.slug,G,{...$,sha:$.previousSha??$.sha,code:$.previousCode,functionEnv:$.previousFunctionEnv??$.functionEnv,functionVersions:$.previousFunctionVersions??$.functionVersions,previousSha:void 0,previousCode:void 0,previousFunctionEnv:void 0,previousFunctionVersions:void 0,timestamp:new Date().toISOString()}),k("Rollback complete")}async function oz(z,G,J,X){let Z=q(z,G),$=new E(Z.region),W=`${Z.slug}-${G}-http`,O={...(await $.getFunction(W)).Configuration?.Environment?.Variables??{}};if(O.MAINTENANCE_MODE=J?"1":"0",J&&X)O.MAINTENANCE_BYPASS_SECRET=X;if(!J)delete O.MAINTENANCE_BYPASS_SECRET;if(await N(()=>$.updateFunctionConfiguration({FunctionName:W,Environment:{Variables:O}})),(Z.app.provisionedConcurrency??0)>0)await $.waitForFunctionActive(W,120),await c($,W);k(J?"Application is now in maintenance mode (503)":"Application is live")}async function yz(z,G,J){let X=q(z,G),Z=new E(X.region),$=`${X.slug}-${G}-cli`,W=await Z.invoke({FunctionName:$,InvocationType:"RequestResponse",Payload:{command:J},LogType:"Tail"});if(W.FunctionError)throw Error(`Command failed: ${W.Payload}`);return W.Payload??""}var wz=(z,G)=>`commands/${z}/${G}/history.json`,kz=50;async function qz(z,G,J,X){try{return(await z.getObjectJson(G,wz(J,X)))?.records??[]}catch{return[]}}async function tz(z,G,J){let X=q(z,G),Z=new E(X.region),$=`${X.slug}-${G}-cli`,W=await Z.invoke({FunctionName:$,InvocationType:"RequestResponse",Payload:{command:J},LogType:"Tail"}),M=W.Payload??"",O=W.FunctionError?"error":"ok",K=-1;try{let H=new C(X.region);if(await H.bucketExists(X.artifactBucket)){let j=await qz(H,X.artifactBucket,X.slug,G);K=j.reduce((V,L)=>Math.max(V,L.id),0)+1,j.push({id:K,command:J,timestamp:new Date().toISOString(),status:O,output:M.slice(0,4000)}),await H.putObjectJson(X.artifactBucket,wz(X.slug,G),{records:j.slice(-kz)})}}catch{}if(W.FunctionError)throw Error(`Command failed${K>0?` (#${K})`:""}: ${M}`);return{id:K,status:O,output:M}}async function xz(z,G){let J=q(z,G),X=new C(J.region);return qz(X,J.artifactBucket,J.slug,G)}async function nz(z,G,J){let X=await xz(z,G);if(!X.length)return;return J==null?X[X.length-1]:X.find((Z)=>Z.id===J)}async function ez(z,G,J){let X=Buffer.from(J,"utf-8").toString("base64");return yz(z,G,`tscloud:db-query --sql-base64=${X}`)}async function zG(z,G){let J=q(z,G),X=new n(J.region),Z=new E(J.region),$=new C(J.region),W="not deployed",M={};try{let{Stacks:U}=await X.describeStacks({stackName:J.stackName});W=U?.[0]?.StackStatus??W;for(let Q of U?.[0]?.Outputs??[])if(Q.OutputKey)M[Q.OutputKey]=Q.OutputValue??""}catch{}let O=Qz(J.app,J.slug,G),K=J.app.provisionedConcurrency??0,H=["http","cli",...O.length?["queue"]:[]],j=`${J.slug}-${G}`,V=[];for(let U of H){let Q=`${j}-${U}`,R={mode:U,name:Q,version:"$LATEST"};if(K>0){let A=await Z.getAlias(Q,"live").catch(()=>null);if(A?.FunctionVersion){R.version=A.FunctionVersion;let w=await Z.getProvisionedConcurrencyConfig(Q,"live").catch(()=>null);if(w)R.provisioned={status:w.Status??"-",allocated:w.AllocatedProvisionedConcurrentExecutions??0,requested:w.RequestedProvisionedConcurrentExecutions??0}}}V.push(R)}let L=await p($,J.artifactBucket,J.slug,G).catch(()=>null);return{slug:J.slug,environment:G,region:J.region,stackStatus:W,endpoint:M.HttpApiEndpoint,assetUrl:L?.assetUrl,scheduler:J.app.scheduler??"on",queues:O,provisionedConcurrency:K,functions:V,lastRelease:L?{sha:L.sha,timestamp:L.timestamp}:void 0}}function Az(z,G){return`${z}-${G}-db`}async function GG(z,G,J,X){let Z=q(z,G);if(Z.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");let{RDSClient:$}=await import("./chunk-yv9sth30.js"),W=new $(Z.region),M=Az(Z.slug,G);Y(`Scaling ${M} → ${J}–${X} ACUs`),await W.modifyDBCluster({DBClusterIdentifier:M,ServerlessV2ScalingConfiguration:{MinCapacity:J,MaxCapacity:X},ApplyImmediately:!0}),k(`Scaling applied to ${M} (takes effect shortly).`)}async function JG(z,G,J){let X=q(z,G);if(X.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");if(!J.toTime&&!J.latest)throw Error("Specify a restore point: --to <ISO timestamp> or --latest.");let{RDSClient:Z}=await import("./chunk-yv9sth30.js"),$=new Z(X.region),W=Az(X.slug,G),M=J.latest?"latest":J.toTime.toISOString().replace(/[^0-9]/g,"").slice(0,14),O=J.target??`${W}-restore-${M}`;Y(`Restoring ${W} → new cluster ${O} (${J.latest?"latest restorable time":J.toTime.toISOString()})`),await $.restoreDBClusterToPointInTime({DBClusterIdentifier:O,SourceDBClusterIdentifier:W,RestoreToTime:J.toTime,UseLatestRestorableTime:J.latest}),Y("Waiting for the restored cluster to be ready");for(let K=0;K<120;K++){let{DBClusters:H}=await $.describeDBClusters({DBClusterIdentifier:O}),j=H?.[0]?.Status;if(j&&j!=="creating")break;await new Promise((V)=>setTimeout(V,15000))}return Y("Adding a writer instance"),await $.createDBInstance({DBInstanceIdentifier:`${O}-1`,DBClusterIdentifier:O,Engine:"aurora-mysql",DBInstanceClass:"db.serverless"}),k(`Restore complete → cluster ${O} with writer ${O}-1. Point an env's database at it once available.`),O}
-export{d as zd,iz as Ad,hz as Bd,Iz as Cd,o as Dd,Sz as Ed,rz as Fd,az as Gd,sz as Hd,oz as Id,yz as Jd,tz as Kd,xz as Ld,nz as Md,ez as Nd,zG as Od,GG as Pd,JG as Qd};

package/dist/bin/chunk-ngcyftm2.js

@@ -1 +0,0 @@
-import{p as a,q as b,r as c,s as d,t as e,u as f}from"./chunk-rytk89az.js";import"./chunk-ctd2vg9w.js";import"./chunk-gavvf0pg.js";import"./chunk-h5pa5men.js";import"./chunk-j703btc5.js";import"./chunk-fy8j3y8p.js";import"./chunk-fpm59y25.js";import"./chunk-mh0kdzqp.js";export{c as uploadStaticFiles,d as invalidateCache,a as generateStaticSiteTemplate,f as deployStaticSiteFull,b as deployStaticSite,e as deleteStaticSite};

package/dist/bin/chunk-p66ptpmr.js

@@ -1,2 +0,0 @@
-import{Og as V}from"./chunk-fpm59y25.js";import{deflateRawSync as Z}from"zlib";function Q(G,k){let J=typeof k==="string"?Buffer.from(k,"utf-8"):k,K=Z(J),U=E(J),Y=new Date,M=(Y.getHours()<<11|Y.getMinutes()<<5|Y.getSeconds()>>1)&65535,$=(Y.getFullYear()-1980<<9|Y.getMonth()+1<<5|Y.getDate())&65535,O=Buffer.from(G,"utf-8"),_=Buffer.alloc(30+O.length);_.writeUInt32LE(67324752,0),_.writeUInt16LE(20,4),_.writeUInt16LE(0,6),_.writeUInt16LE(8,8),_.writeUInt16LE(M,10),_.writeUInt16LE($,12),_.writeUInt32LE(U,14),_.writeUInt32LE(K.length,18),_.writeUInt32LE(J.length,22),_.writeUInt16LE(O.length,26),_.writeUInt16LE(0,28),O.copy(_,30);let X=Buffer.alloc(46+O.length);X.writeUInt32LE(33639248,0),X.writeUInt16LE(20,4),X.writeUInt16LE(20,6),X.writeUInt16LE(0,8),X.writeUInt16LE(8,10),X.writeUInt16LE(M,12),X.writeUInt16LE($,14),X.writeUInt32LE(U,16),X.writeUInt32LE(K.length,20),X.writeUInt32LE(J.length,24),X.writeUInt16LE(O.length,28),X.writeUInt16LE(0,30),X.writeUInt16LE(0,32),X.writeUInt16LE(0,34),X.writeUInt16LE(0,36),X.writeUInt32LE(0,38),X.writeUInt32LE(0,42),O.copy(X,46);let h=_.length+K.length,j=X.length,A=Buffer.alloc(22);return A.writeUInt32LE(101010256,0),A.writeUInt16LE(0,4),A.writeUInt16LE(0,6),A.writeUInt16LE(1,8),A.writeUInt16LE(1,10),A.writeUInt32LE(j,12),A.writeUInt32LE(h,16),A.writeUInt16LE(0,20),Buffer.concat([_,K,X,A])}function E(G){let k=[];for(let K=0;K<256;K++){let U=K;for(let Y=0;Y<8;Y++)U=U&1?3988292384^U>>>1:U>>>1;k[K]=U}let J=4294967295;for(let K=0;K<G.length;K++)J=k[(J^G[K])&255]^J>>>8;return(J^4294967295)>>>0}class I{client;region;constructor(G="us-east-1",k){this.region=G,this.client=new V(void 0,{profile:k})}async createFunction(G){return await this.client.request({service:"lambda",region:this.region,method:"POST",path:"/2015-03-31/functions",headers:{"Content-Type":"application/json"},body:JSON.stringify(G)})}async getFunction(G){return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2015-03-31/functions/${encodeURIComponent(G)}`,headers:{"Content-Type":"application/json"}})}async updateFunctionCode(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"PUT",path:`/2015-03-31/functions/${encodeURIComponent(k)}/code`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async updateFunctionCodeInline(G,k,J="index.js"){let K=Q(J,k);return this.updateFunctionCode({FunctionName:G,ZipFile:K.toString("base64")})}async updateFunctionConfiguration(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"PUT",path:`/2015-03-31/functions/${encodeURIComponent(k)}/configuration`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async deleteFunction(G){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2015-03-31/functions/${encodeURIComponent(G)}`,headers:{"Content-Type":"application/json"}})}async invoke(G){let{FunctionName:k,InvocationType:J="RequestResponse",Payload:K,LogType:U}=G,Y={"Content-Type":"application/json","X-Amz-Invocation-Type":J};if(U)Y["X-Amz-Log-Type"]=U;let M=K?typeof K==="string"?K:JSON.stringify(K):void 0,$=await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2015-03-31/functions/${encodeURIComponent(k)}/invocations`,headers:Y,body:M,returnHeaders:!0});return{StatusCode:$.statusCode||200,FunctionError:$.headers?.["x-amz-function-error"],LogResult:$.headers?.["x-amz-log-result"],Payload:typeof $.body==="string"?$.body:JSON.stringify($.body),ExecutedVersion:$.headers?.["x-amz-executed-version"]}}async listFunctions(G){let k={};if(G?.MaxItems)k.MaxItems=String(G.MaxItems);if(G?.Marker)k.Marker=G.Marker;if(G?.FunctionVersion)k.FunctionVersion=G.FunctionVersion;return await this.client.request({service:"lambda",region:this.region,method:"GET",path:"/2015-03-31/functions",queryParams:Object.keys(k).length>0?k:void 0,headers:{"Content-Type":"application/json"}})}async addPermission(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2015-03-31/functions/${encodeURIComponent(k)}/policy`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async removePermission(G,k){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2015-03-31/functions/${encodeURIComponent(G)}/policy/${encodeURIComponent(k)}`,headers:{"Content-Type":"application/json"}})}async publishVersion(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2015-03-31/functions/${encodeURIComponent(k)}/versions`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async createAlias(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2015-03-31/functions/${encodeURIComponent(k)}/aliases`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async updateAlias(G){let{FunctionName:k,Name:J,...K}=G;return this.client.request({service:"lambda",region:this.region,method:"PUT",path:`/2015-03-31/functions/${encodeURIComponent(k)}/aliases/${encodeURIComponent(J)}`,headers:{"Content-Type":"application/json"},body:JSON.stringify(K)})}async getAlias(G,k){try{return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2015-03-31/functions/${encodeURIComponent(G)}/aliases/${encodeURIComponent(k)}`})}catch(J){if(/ResourceNotFound/i.test(String(J?.message)))return null;throw J}}async getProvisionedConcurrencyConfig(G,k){try{return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2019-09-30/functions/${encodeURIComponent(G)}/provisioned-concurrency`,queryParams:{Qualifier:k}})}catch(J){if(/ProvisionedConcurrencyConfigNotFound|ResourceNotFound/i.test(String(J?.message)))return null;throw J}}async putProvisionedConcurrencyConfig(G){let{FunctionName:k,Qualifier:J,ProvisionedConcurrentExecutions:K}=G;return this.client.request({service:"lambda",region:this.region,method:"PUT",path:`/2019-09-30/functions/${encodeURIComponent(k)}/provisioned-concurrency`,queryParams:{Qualifier:J},headers:{"Content-Type":"application/json"},body:JSON.stringify({ProvisionedConcurrentExecutions:K})})}async getFunctionConcurrency(G){try{return(await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2019-10-31/functions/${encodeURIComponent(G)}/concurrency`}))?.ReservedConcurrentExecutions??null}catch(k){if(/ResourceNotFound|ProvisionedConcurrencyConfigNotFound/i.test(String(k?.message)))return null;throw k}}async putFunctionConcurrency(G,k){await this.client.request({service:"lambda",region:this.region,method:"PUT",path:`/2019-10-31/functions/${encodeURIComponent(G)}/concurrency`,headers:{"Content-Type":"application/json"},body:JSON.stringify({ReservedConcurrentExecutions:k})})}async deleteFunctionConcurrency(G){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2019-10-31/functions/${encodeURIComponent(G)}/concurrency`})}async deleteProvisionedConcurrencyConfig(G,k){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2019-09-30/functions/${encodeURIComponent(G)}/provisioned-concurrency`,queryParams:{Qualifier:k}})}async waitForFunctionActive(G,k=60){let J=Date.now(),K=k*1000;while(Date.now()-J<K)try{let U=await this.getFunction(G),Y=U.Configuration?.State;if(Y==="Active")return U.Configuration;if(Y==="Failed")throw Error(`Function ${G} failed: ${U.Configuration?.StateReason}`);await new Promise((M)=>setTimeout(M,2000))}catch(U){if(U.code==="ResourceNotFoundException"){await new Promise((Y)=>setTimeout(Y,2000));continue}throw U}throw Error(`Timeout waiting for function ${G} to become active`)}async functionExists(G){try{return await this.getFunction(G),!0}catch(k){if(k.code==="ResourceNotFoundException"||k.statusCode===404)return!1;throw k}}async createFunctionUrl(G){let{FunctionName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2021-10-31/functions/${encodeURIComponent(k)}/url`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async getFunctionUrl(G){try{return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2021-10-31/functions/${encodeURIComponent(G)}/url`,headers:{"Content-Type":"application/json"}})}catch(k){if(k.statusCode===404)return null;throw k}}async deleteFunctionUrl(G){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2021-10-31/functions/${encodeURIComponent(G)}/url`,headers:{"Content-Type":"application/json"}})}async createFunctionWithCode(G){let{Code:k,Filename:J="index.js",...K}=G,U=Q(J,k);return this.createFunction({...K,Code:{ZipFile:U.toString("base64")}})}async addFunctionUrlPermission(G){return this.addPermission({FunctionName:G,StatementId:"FunctionURLAllowPublicAccess",Action:"lambda:InvokeFunctionUrl",Principal:"*",FunctionUrlAuthType:"NONE"})}async publishLayerVersion(G){let{LayerName:k,...J}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2018-10-31/layers/${encodeURIComponent(k)}/versions`,headers:{"Content-Type":"application/json"},body:JSON.stringify(J)})}async listLayerVersions(G,k){let J={};if(k?.CompatibleRuntime)J.CompatibleRuntime=k.CompatibleRuntime;if(k?.CompatibleArchitecture)J.CompatibleArchitecture=k.CompatibleArchitecture;if(k?.MaxItems)J.MaxItems=String(k.MaxItems);if(k?.Marker)J.Marker=k.Marker;return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2018-10-31/layers/${encodeURIComponent(G)}/versions`,queryParams:Object.keys(J).length>0?J:void 0,headers:{"Content-Type":"application/json"}})}async getLayerVersion(G,k){return await this.client.request({service:"lambda",region:this.region,method:"GET",path:`/2018-10-31/layers/${encodeURIComponent(G)}/versions/${k}`,headers:{"Content-Type":"application/json"}})}async addLayerVersionPermission(G){let{LayerName:k,VersionNumber:J,...K}=G;return await this.client.request({service:"lambda",region:this.region,method:"POST",path:`/2018-10-31/layers/${encodeURIComponent(k)}/versions/${J}/policy`,headers:{"Content-Type":"application/json"},body:JSON.stringify(K)})}async deleteLayerVersion(G,k){await this.client.request({service:"lambda",region:this.region,method:"DELETE",path:`/2018-10-31/layers/${encodeURIComponent(G)}/versions/${k}`,headers:{"Content-Type":"application/json"}})}}
-export{I as Rd};

package/dist/bin/chunk-qk9qgepa.js

@@ -1 +0,0 @@
-import{$b as C,Ab as b,Ac as ba,Bb as c,Bc as ca,Cb as d,Cc as da,Db as e,Dc as ea,Eb as f,Ec as fa,Fb as g,Fc as ga,Gb as h,Gc as ha,Hb as i,Hc as ia,Ib as j,Ic as ja,Jb as k,Jc as ka,Kb as l,Kc as la,Lb as m,Lc as ma,Mb as n,Mc as na,Nb as o,Nc as oa,Ob as p,Oc as pa,Pb as q,Pc as qa,Qb as r,Qc as ra,Rb as s,Rc as sa,Sb as t,Sc as ta,Tb as u,Tc as ua,Ub as v,Uc as va,Vb as w,Vc as wa,Wb as x,Wc as xa,Xb as y,Xc as ya,Yb as z,Yc as za,Zb as A,Zc as Aa,_b as B,ac as D,ad as Ba,bc as E,bd as Ca,cc as F,dc as G,ec as H,fc as I,gc as J,hc as K,ic as L,jc as M,kc as N,lc as O,mc as P,nc as Q,oc as R,pc as S,qc as T,rc as U,sc as V,tc as W,uc as X,vc as Y,wc as Z,xc as _,yc as $,zb as a,zc as aa}from"./chunk-1k5kszjp.js";import"./chunk-ax9mr6wm.js";import"./chunk-etrb03mt.js";import"./chunk-rxcvf10f.js";import"./chunk-mh0kdzqp.js";export{n as zonedParts,o as zoneOffsetMs,ia as zeroFill,p as utcInstantOfLocal,w as usageDeltaKey,ea as toFocusRecords,fa as toFocusJsonl,f as tieredMicroCents,O as strongestActiveAction,ga as streamFocusJsonl,xa as startSpendLoop,Ca as spendOpenApiPaths,ra as spendNotificationText,$ as signalDefinition,A as scopeKey,N as runEnforcement,Y as routeMatches,j as roundCents,S as robustZScore,D as projectSpend,i as priceUsageLines,h as priceUsage,r as previousBudgetWindow,M as planEnforcement,E as percentOfLimit,ba as optionsForSignal,y as meterTelemetry,k as mergePriceBooks,J as mergeDecisions,R as medianAbsoluteDeviation,Q as median,ca as lookbackHoursForSignal,m as isValidTimeZone,P as isOperationAllowed,t as hourBucketsBetween,s as hourBucket,Ba as handleSpendRequest,H as governingLimitCents,F as formatTimeToExhaustion,qa as formatCents,g as findPriceEntry,v as findMapping,T as ewma,I as evaluateBudget,V as detectLatestAnomaly,U as detectAnomalies,na as createEnforcementHandlers,Aa as compositeSpendTransport,q as budgetWindow,ma as assertSpendAllows,W as anomalyOptionsForSignal,z as aggregateDeltas,L as USER_VISIBLE_ACTIONS,pa as URGENT_SPEND_EVENTS,C as SpendStore,ha as SpendService,va as SpendRunner,sa as SpendNotificationRouter,ua as SpendLoopLease,ka as SpendGate,la as SpendCapError,aa as SignalSource,ta as SPEND_LEASE_SETTING,ja as SPEND_GATE_SETTING,wa as SPEND_CYCLE_SECONDS,X as SENSITIVITY_THRESHOLDS,oa as RecordingSpendTransport,G as MIN_PROJECTION_CONFIDENCE,e as MICRO_CENTS,a as METER_KEYS,b as METERS,da as FOCUS_VERSION,d as ENFORCEMENT_SEVERITY,K as ENFORCEMENT_DESCRIPTIONS,c as ENFORCEMENT_ACTIONS,_ as DETECTABLE_SIGNALS,B as DEFAULT_THRESHOLDS,l as DEFAULT_PRICE_BOOK,u as DEFAULT_METER_MAPPINGS,x as CounterTracker,za as ComputeSpendTransport,ya as AwsSpendTransport,Z as AnomalyConfigStore};

package/dist/bin/chunk-rytk89az.js

@@ -1,60 +0,0 @@
-import{hd as c,id as f,jd as a,kd as r,ld as s}from"./chunk-ctd2vg9w.js";import{nd as p}from"./chunk-gavvf0pg.js";import{Uf as l}from"./chunk-h5pa5men.js";import{Zf as D}from"./chunk-j703btc5.js";import{$f as w}from"./chunk-fy8j3y8p.js";import{Vo as m}from"./chunk-mh0kdzqp.js";function n(G){let{bucketName:Q,domain:z,aliases:q,certificateArn:F,defaultRootObject:J="index.html",errorDocument:_="404.html",passthroughUrls:$=!1,singlePageApp:W=!1,dynamicApp:j=!1,computeOriginDomain:S,computeOriginPort:B=3008,computeOriginId:x="app-compute",retainOnStackDelete:C=!1}=G,M=C?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},y=j&&!!S,R=y?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],N=y?["GET","HEAD"]:["GET","HEAD"],I={},h={};I.S3Bucket={Type:"AWS::S3::Bucket",...M,Properties:{BucketName:Q,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:J,ErrorDocument:_}}},h.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},h.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},I.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...M,Properties:{OriginAccessControlConfig:{Name:`OAC-${Q}`,Description:`OAC for ${Q}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let E;if($&&y)E="InstallRootRedirectFunction",I[E]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
-  var request = event.request;
-  if (request.uri === '/' || request.uri === '') {
-    return {
-      statusCode: 302,
-      statusDescription: 'Found',
-      headers: {
-        location: { value: 'https://' + request.headers.host.value + '/install.sh' }
-      }
-    };
-  }
-  return request;
-}`}};if(!$)I.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
-  const request = event.request;
-  var uri = request.uri;
-
-  // If URI ends with /, serve index.html
-  if (uri.endsWith('/')) {
-    request.uri = uri + 'index.html';
-  }
-  // If URI doesn't have an extension, append .html
-  else if (!uri.includes('.')) {
-    request.uri = uri + '.html';
-  }
-
-  return request;
-}`}};let O={Id:`S3-${Q}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}},K=y?{Id:x,DomainName:S,CustomOriginConfig:{HTTPPort:B,HTTPSPort:443,OriginProtocolPolicy:"http-only",OriginSSLProtocols:["TLSv1.2"]}}:null,Z=y?x:`S3-${Q}`,U={Enabled:!0,DefaultRootObject:J,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:K?[K,O]:[O],DefaultCacheBehavior:{TargetOriginId:Z,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:R,CachedMethods:N,Compress:!0,...y?{CachePolicyId:"4135ea2d-6df8-44a3-9df3-4b5a84be39ad",OriginRequestPolicyId:"b689b0a8-53d0-40ab-baf2-68738e2966ac",...$&&E?{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":[E,"FunctionARN"]}}]}:{}}:{CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",...!$&&{FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]}}},...y&&$?{CacheBehaviors:[{PathPattern:"/install.sh",TargetOriginId:`S3-${Q}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD","OPTIONS"],CachedMethods:["GET","HEAD","OPTIONS"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6"}]}:{},CustomErrorResponses:W?[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300}]:[{ErrorCode:403,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300}]};if(z&&F)U.Aliases=q&&q.length>0?q:[z],U.ViewerCertificate={AcmCertificateArn:F,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else U.ViewerCertificate={CloudFrontDefaultCertificate:!0};return I.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",...M,DependsOn:["S3Bucket","CloudFrontOAC",...$&&y&&E?[E]:[],...!$?["UrlRewriteFunction"]:[]],Properties:{DistributionConfig:U}},h.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},h.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},I.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",...M,DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},h.SiteUrl={Description:"Site URL",Value:z?`https://${z}`:{"Fn::Sub":"https://${CloudFrontDistribution.DomainName}"}},{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${z||Q} (External DNS)`,Resources:I,Outputs:h}}async function d(G){let Q=G.region||"us-east-1",z="us-east-1",q=G.domain,F=G.bucket||q.replace(/\./g,"-"),J=G.stackName||`${G.siteName}-static-site`,_=new l("us-east-1"),$=new f("us-east-1"),W=null;if(!G.skipDnsVerification){W=s(G.dnsProvider),console.log(`Verifying DNS provider can manage ${q}...`);let X=await W.listRecords(q);if(!X.success){let Y=X.message||"unknown error — check API credentials and domain ownership";return{success:!1,stackName:J,bucket:F,message:`DNS provider '${W.name}' cannot manage domain ${q}: ${Y}`}}console.log(`DNS provider '${W.name}' verified for ${q}`)}else console.log(`Skipping DNS verification for ${q}`);let j=G.certificateArn,x=q.split(".").length===2?`www.${q}`:void 0;if(!j){console.log(`Checking for existing SSL certificate for ${q}...`);let X=await $.findCertificateByDomain(q),Y=!1;if(X&&X.Status==="ISSUED"){if(x&&X.SubjectAlternativeNames)Y=X.SubjectAlternativeNames.includes(x)||X.SubjectAlternativeNames.some((V)=>V===`*.${q}`);else Y=!0;if(Y)j=X.CertificateArn,console.log(`Found existing certificate with www coverage: ${j}`);else console.log(`Existing certificate doesn't cover ${x}, requesting new one...`)}if(!j){if(!W)return{success:!1,stackName:J,bucket:F,message:`No DNS provider available to validate SSL certificate for ${q}. Provide a certificateArn or enable DNS verification.`};console.log(`Requesting new SSL certificate for ${q}${x?` (including ${x})`:""}...`);let T=await new r(W,"us-east-1").findOrCreateCertificate({domainName:q,subjectAlternativeNames:x?[x]:void 0,waitForValidation:!0,maxWaitMinutes:10});if(T.status!=="issued")return{success:!1,stackName:J,bucket:F,message:`SSL certificate validation failed. Status: ${T.status}`};j=T.certificateArn,console.log(`Certificate issued: ${j}`)}}let C=!1,M;try{let X=await _.describeStacks({stackName:J});if(X.Stacks.length>0){let Y=X.Stacks[0],V=Y.StackStatus;if(V==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await _.waitForStack(J,"stack-delete-complete"),C=!1;else if(V==="DELETE_COMPLETE")C=!1;else C=!0,M=(Y.Outputs||[]).find((H)=>H.OutputKey==="BucketName")?.OutputValue}}catch(X){if(X.message?.includes("does not exist")||X.code==="ValidationError")C=!1;else throw X}let y=M||F;if(!C){let X=new w(Q),Y=new p,V=!1;if(q)try{console.log(`Checking for existing CloudFront distributions with alias ${q}...`);let T=await Y.listDistributions();for(let H of T){let L=[];if(H.Aliases?.Items){if(Array.isArray(H.Aliases.Items))L=H.Aliases.Items;else if(typeof H.Aliases.Items==="object"){let v=H.Aliases.Items.CNAME;if(typeof v==="string")L=[v];else if(Array.isArray(v))L=v}}if(L.includes(q)){V=!0,console.log(`Found existing CloudFront distribution ${H.Id} with alias ${q}`),console.log("Reusing existing infrastructure for updates...");let A=(await Y.getDistributionConfig(H.Id)).DistributionConfig?.Origins?.Items,b;if(A){let P=[];if(Array.isArray(A))P=A;else if(A.Origin)P=Array.isArray(A.Origin)?A.Origin:[A.Origin];else P=[A];for(let g of P){let k=(g.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(k){b=k[1];break}}}if(b)return console.log(`Using existing S3 bucket: ${b}`),{success:!0,stackName:`existing-${H.Id}`,bucket:b,distributionId:H.Id,distributionDomain:H.DomainName,domain:q,certificateArn:j,message:"Using existing CloudFront distribution",_existingInfrastructure:!0}}}}catch{}if(!V)try{if((await X.headBucket(F)).exists){console.log(`Found orphaned S3 bucket ${F}, cleaning up...`);try{let H=X.emptyBucket(F).then(()=>X.deleteBucket(F)),L=new Promise((v,A)=>setTimeout(()=>A(Error("Bucket cleanup timeout")),30000));await Promise.race([H,L]),console.log(`Deleted orphaned S3 bucket ${F}`)}catch(H){console.log(`Note: Could not clean up S3 bucket: ${H.message}`);let L=Date.now().toString(36);y=`${F}-${L}`,console.log(`Using alternative bucket name: ${y}`)}}}catch{}}let N=n({bucketName:y,domain:q,aliases:x?[q,x]:[q],certificateArn:j,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument,passthroughUrls:G.passthroughUrls,singlePageApp:G.singlePageApp,dynamicApp:G.dynamicApp,computeOriginDomain:G.computeOriginDomain,computeOriginPort:G.computeOriginPort,computeOriginId:G.computeOriginId}),I=Object.entries(G.tags||{}).map(([X,Y])=>({Key:X,Value:Y}));if(I.push({Key:"ManagedBy",Value:"ts-cloud"}),I.push({Key:"Application",Value:G.siteName}),W)I.push({Key:"DnsProvider",Value:W.name});let h,E=!1;if(C){E=!0,console.log(`Updating CloudFormation stack: ${J}`);try{h=(await _.updateStack({stackName:J,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:I})).StackId,console.log(`Update initiated, stack ID: ${h}`)}catch(X){if(X.message?.includes("No updates are to be performed")){let Y=await _.describeStacks({stackName:J});h=Y.Stacks[0].StackId;let V=Y.Stacks[0]?.Outputs||[],T=(L)=>V.find((v)=>v.OutputKey===L)?.OutputValue,H=T("DistributionDomain");if(H)await u(W,q,H);return{success:!0,stackId:h,stackName:J,bucket:T("BucketName")||y,distributionId:T("DistributionId"),distributionDomain:H,domain:q,certificateArn:j,message:"Static site infrastructure is already up to date"}}else throw X}}else console.log(`Creating CloudFormation stack: ${J}`),console.log(`Bucket name: ${y}`),console.log(`Domain: ${q}`),console.log(`Certificate ARN: ${j}`),h=(await _.createStack({stackName:J,templateBody:JSON.stringify(N),capabilities:["CAPABILITY_IAM"],tags:I,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${h}`);console.log(`Waiting for stack to reach ${E?"stack-update-complete":"stack-create-complete"}...`);try{await _.waitForStack(J,E?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(X){if(X.message?.includes("must be verified")||X.message?.includes("Access denied for operation")){console.log("CloudFront account verification required - checking for existing infrastructure...");try{let V=new p,T=await V.listDistributions();for(let H of T){let L=[];if(H.Aliases?.Items){if(Array.isArray(H.Aliases.Items))L=H.Aliases.Items;else if(typeof H.Aliases.Items==="object"){let v=H.Aliases.Items.CNAME;if(typeof v==="string")L=[v];else if(Array.isArray(v))L=v}}if(L.includes(q)){console.log(`Found existing CloudFront distribution ${H.Id} with alias ${q}`),console.log("Using existing infrastructure despite account verification requirement...");let A=(await V.getDistributionConfig(H.Id)).DistributionConfig?.Origins?.Items,b;if(A){let P=[];if(Array.isArray(A))P=A;else if(A.Origin)P=Array.isArray(A.Origin)?A.Origin:[A.Origin];else P=[A];for(let g of P){let k=(g.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(k){b=k[1];break}}}if(b){console.log(`Using existing S3 bucket: ${b}`);let P=H.DomainName;if(P)await u(W,q,P);return{success:!0,stackName:`existing-${H.Id}`,bucket:b,distributionId:H.Id,distributionDomain:H.DomainName,domain:q,certificateArn:j,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}}catch{}return console.log(`
-┌─────────────────────────────────────────────────────────────────────────────┐
-│  AWS ACCOUNT VERIFICATION REQUIRED                                          │
-├─────────────────────────────────────────────────────────────────────────────┤
-│  Your AWS account must be verified before you can create CloudFront         │
-│  distributions. This is a one-time requirement for new AWS accounts.        │
-│                                                                             │
-│  To verify your account:                                                    │
-│                                                                             │
-│  1. Go to: https://console.aws.amazon.com/support/home#/                   │
-│  2. Click "Create case"                                                     │
-│  3. Select "Service limit increase"                                         │
-│  4. For Service: Select "CloudFront"                                        │
-│  5. For Request: "Please verify my account for CloudFront access"           │
-│  6. Submit the case                                                         │
-│                                                                             │
-│  Verification typically takes 1-2 business days.                            │
-│  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:h,stackName:J,bucket:y,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:h,stackName:J,bucket:y,message:`Stack deployment failed: ${X.message}`}}let K=(await _.describeStacks({stackName:J})).Stacks[0]?.Outputs||[],Z=(X)=>K.find((Y)=>Y.OutputKey===X)?.OutputValue,U=Z("DistributionDomain");if(U&&W)console.log(`Creating DNS records via ${W.name}...`),await u(W,q,U);else if(U&&!W)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:h,stackName:J,bucket:Z("BucketName")||y,distributionId:Z("DistributionId"),distributionDomain:U,domain:q,certificateArn:j,message:"Static site infrastructure deployed successfully with external DNS"}}async function u(G,Q,z){if(!G){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(Q.split(".").length===2)if(G instanceof c){console.log(`Creating Route53 alias record for apex domain ${Q} -> ${z}`);let J=await G.createCloudFrontAlias({domain:Q,name:Q,cloudFrontDomainName:z});if(!J.success)console.warn(`Warning: Could not create Route53 alias record: ${J.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${Q} -> ${z}`);else console.log(`Created Route53 alias record: ${Q} -> ${z}`);let _=`www.${Q}`;console.log(`Creating Route53 alias record for ${_} -> ${z}`);let $=await G.createCloudFrontAlias({domain:Q,name:_,cloudFrontDomainName:z});if(!$.success)console.warn(`Warning: Could not create www Route53 alias: ${$.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${_} -> ${z}`);else console.log(`Created Route53 alias record: ${_} -> ${z}`)}else{try{let W=await G.listRecords(Q,"A");if(W.success)for(let j of W.records){let S=j.name.replace(/\.$/,"");if(S===Q||S==="")console.log(`Removing existing root A record (${j.content}) to make room for ALIAS...`),await G.deleteRecord(Q,{name:Q,type:"A",content:j.content})}}catch(W){console.log(`Note: Could not check for conflicting A records: ${W instanceof Error?W.message:W}`)}console.log(`Creating ALIAS record for apex domain ${Q} -> ${z}`);let J=await G.upsertRecord(Q,{name:Q,type:"ALIAS",content:z,ttl:600});if(!J.success)console.warn(`Warning: Could not create ALIAS record: ${J.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${Q} -> ${z}`);else console.log(`Created ALIAS record: ${Q} -> ${z}`);let _=`www.${Q}`;console.log(`Creating CNAME record for ${_} -> ${z}`);let $=await G.upsertRecord(Q,{name:_,type:"CNAME",content:z,ttl:600});if(!$.success)console.warn(`Warning: Could not create www DNS record: ${$.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${_} -> ${z}`);else console.log(`Created CNAME record: ${_} -> ${z}`)}else{console.log(`Creating CNAME record for ${Q} -> ${z}`);let J=await G.upsertRecord(Q,{name:Q,type:"CNAME",content:z,ttl:600});if(!J.success)console.warn(`Warning: Could not create DNS record: ${J.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${Q} -> ${z}`);else console.log(`Created CNAME record: ${Q} -> ${z}`)}}async function Hq(G){let{sourceDir:Q,cleanBucket:z=!1,onProgress:q,...F}=G;q?.("infrastructure","Deploying CloudFormation stack...");let J=await d(F);if(!J.success)return J;if(z){q?.("clean","Cleaning old files from S3...");try{await new w(F.region||"us-east-1").emptyBucket(J.bucket)}catch(j){console.log(`Note: Could not clean bucket: ${j.message}`)}}q?.("upload","Uploading files to S3...");let{uploadStaticFiles:_}=await import("./chunk-ngcyftm2.js"),$=await _({sourceDir:Q,bucket:J.bucket,region:F.region||"us-east-1",cacheControl:F.cacheControl,onProgress:(j,S,B)=>{q?.("upload",`${j}/${S}: ${B}`)}});if($.errors.length>0)return{...J,success:!1,message:`Upload errors: ${$.errors.join(", ")}`,filesUploaded:$.uploaded};if(J.distributionId&&$.uploaded>0){q?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:j}=await import("./chunk-ngcyftm2.js");await j(J.distributionId)}q?.("complete","Deployment complete!");let W=$.skipped>0?`Deployed ${$.uploaded} files (${$.skipped} unchanged) with external DNS`:`Deployed ${$.uploaded} files successfully with external DNS`;return{...J,filesUploaded:$.uploaded,filesSkipped:$.skipped,message:W}}function t(G){let{bucketName:Q,domain:z,certificateArn:q,hostedZoneId:F,defaultRootObject:J="index.html",errorDocument:_="404.html"}=G,$={},W={};$.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:Q,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:J,ErrorDocument:_}}},W.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},W.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},$.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${Q}`,Description:`OAC for ${Q}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},$.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
-  const request = event.request;
-  var uri = request.uri;
-
-  // If URI ends with /, serve index.html
-  if (uri.endsWith('/')) {
-    request.uri = uri + 'index.html';
-  }
-  // If URI doesn't have an extension, append .html
-  else if (!uri.includes('.')) {
-    request.uri = uri + '.html';
-  }
-
-  return request;
-}`}};let j={Enabled:!0,DefaultRootObject:J,HttpVersion:"http2and3",IPV6Enabled:!0,PriceClass:"PriceClass_100",Origins:[{Id:`S3-${Q}`,DomainName:{"Fn::GetAtt":["S3Bucket","RegionalDomainName"]},S3OriginConfig:{OriginAccessIdentity:""},OriginAccessControlId:{"Fn::GetAtt":["CloudFrontOAC","Id"]}}],DefaultCacheBehavior:{TargetOriginId:`S3-${Q}`,ViewerProtocolPolicy:"redirect-to-https",AllowedMethods:["GET","HEAD"],CachedMethods:["GET","HEAD"],Compress:!0,CachePolicyId:"658327ea-f89d-4fab-a63d-7e88639e58f6",FunctionAssociations:[{EventType:"viewer-request",FunctionARN:{"Fn::GetAtt":["UrlRewriteFunction","FunctionARN"]}}]},CustomErrorResponses:[{ErrorCode:403,ResponseCode:200,ResponsePagePath:`/${J}`,ErrorCachingMinTTL:300},{ErrorCode:404,ResponseCode:404,ResponsePagePath:`/${_}`,ErrorCachingMinTTL:300}]};if(z&&q)j.Aliases=[z],j.ViewerCertificate={AcmCertificateArn:q,SslSupportMethod:"sni-only",MinimumProtocolVersion:"TLSv1.2_2021"};else j.ViewerCertificate={CloudFrontDefaultCertificate:!0};if($.CloudFrontDistribution={Type:"AWS::CloudFront::Distribution",DependsOn:["S3Bucket","CloudFrontOAC","UrlRewriteFunction"],Properties:{DistributionConfig:j}},W.DistributionId={Description:"CloudFront Distribution ID",Value:{Ref:"CloudFrontDistribution"}},W.DistributionDomain={Description:"CloudFront Distribution Domain",Value:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]}},$.S3BucketPolicy={Type:"AWS::S3::BucketPolicy",DependsOn:["S3Bucket","CloudFrontDistribution"],Properties:{Bucket:{Ref:"S3Bucket"},PolicyDocument:{Version:"2012-10-17",Statement:[{Sid:"AllowCloudFrontServicePrincipal",Effect:"Allow",Principal:{Service:"cloudfront.amazonaws.com"},Action:"s3:GetObject",Resource:{"Fn::Sub":"arn:aws:s3:::${S3Bucket}/*"},Condition:{StringEquals:{"AWS:SourceArn":{"Fn::Sub":"arn:aws:cloudfront::${AWS::AccountId}:distribution/${CloudFrontDistribution}"}}}}]}}},z&&F)$.DNSRecord={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:F,Name:z,Type:"A",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},$.DNSRecordIPv6={Type:"AWS::Route53::RecordSet",DependsOn:"CloudFrontDistribution",Properties:{HostedZoneId:F,Name:z,Type:"AAAA",AliasTarget:{DNSName:{"Fn::GetAtt":["CloudFrontDistribution","DomainName"]},HostedZoneId:"Z2FDTNDATAQYW2",EvaluateTargetHealth:!1}}},W.SiteUrl={Description:"Site URL",Value:{"Fn::Sub":"https://${DNSRecord}"}};return{AWSTemplateFormatVersion:"2010-09-09",Description:`Static site infrastructure for ${z||Q}`,Resources:$,Outputs:W}}async function o(G){if(G.dnsProvider&&G.dnsProvider.provider!=="route53"){let K=G.domain||(G.subdomain&&G.baseDomain?`${G.subdomain}.${G.baseDomain}`:void 0);if(!K)return{success:!1,stackName:G.stackName||`${G.siteName}-static-site`,bucket:G.bucket||`${G.siteName}-${Date.now()}`,message:"Domain is required when using external DNS provider"};return d({siteName:G.siteName,region:G.region,domain:K,bucket:G.bucket,certificateArn:G.certificateArn,stackName:G.stackName,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument,cacheControl:G.cacheControl,tags:G.tags,dnsProvider:G.dnsProvider})}let Q=G.region||"us-east-1",z="us-east-1",q;if(G.domain)q=G.domain;else if(G.subdomain&&G.baseDomain)q=`${G.subdomain}.${G.baseDomain}`;let F=G.bucket||(q?q.replace(/\./g,"-"):`${G.siteName}-${Date.now()}`),J=G.stackName||`${G.siteName}-static-site`,_=new l(z),$=new D,W=new f("us-east-1"),j=new a("us-east-1"),S=G.hostedZoneId,B=G.certificateArn;if(q&&!S){let K=await $.findHostedZoneForDomain(q);if(K)S=K.Id.replace("/hostedzone/","");else return{success:!1,stackName:J,bucket:F,message:`No Route53 hosted zone found for ${G.baseDomain||q}. Please create one first.`}}if(q&&!B&&S){let K=await W.findCertificateByDomain(q);if(K&&K.Status==="ISSUED")B=K.CertificateArn;else B=(await j.requestAndValidate({domainName:q,hostedZoneId:S,waitForValidation:!0,maxWaitMinutes:10})).certificateArn}let x=!1,C;try{let K=await _.describeStacks({stackName:J});if(K.Stacks.length>0){let Z=K.Stacks[0],U=Z.StackStatus;if(U==="DELETE_IN_PROGRESS")console.log("Previous stack is still being deleted, waiting..."),await _.waitForStack(J,"stack-delete-complete"),x=!1;else if(U==="DELETE_COMPLETE")x=!1;else x=!0,C=(Z.Outputs||[]).find((Y)=>Y.OutputKey==="BucketName")?.OutputValue}}catch(K){if(K.message?.includes("does not exist")||K.code==="ValidationError")x=!1;else throw K}let M=C||F;if(!x){let K=new w(Q),Z=new p,U=!1;if(q){try{console.log(`Checking for existing CloudFront distribution for ${q}...`);let X=await Z.listDistributions();for(let Y of X){let V=[];if(Y.Aliases?.Items){if(Array.isArray(Y.Aliases.Items))V=Y.Aliases.Items;else if(typeof Y.Aliases.Items==="object"){let T=Y.Aliases.Items.CNAME;if(typeof T==="string")V=[T];else if(Array.isArray(T))V=T}}if(V.includes(q)){U=!0,console.log(`Found existing CloudFront distribution ${Y.Id} for ${q}`);let H=(await Z.getDistributionConfig(Y.Id)).DistributionConfig?.Origins?.Items,L;if(H){let v=[];if(Array.isArray(H))v=H;else if(H.Origin)v=Array.isArray(H.Origin)?H.Origin:[H.Origin];else v=[H];for(let A of v){let P=(A.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(P){L=P[1];break}}}if(L){let v=q.replace(/\./g,"-");if(!L.startsWith(v)&&!L.includes(G.siteName)){console.log(`Warning: Found distribution with mismatched bucket ${L}, skipping...`);continue}if(console.log(`Using existing S3 bucket: ${L}`),S&&Y.DomainName)try{console.log(`Ensuring Route53 records exist for ${q}...`),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"A",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:Y.DomainName,EvaluateTargetHealth:!1}),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"AAAA",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:Y.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records ensured for ${q}`)}catch(A){console.log(`Note: Could not update Route53 records: ${A.message}`)}return{success:!0,stackName:`existing-${Y.Id}`,bucket:L,distributionId:Y.Id,distributionDomain:Y.DomainName,domain:q,certificateArn:B,message:"Using existing CloudFront distribution"}}}}}catch{}if(S)try{let Y=(await $.listResourceRecordSets({HostedZoneId:S})).ResourceRecordSets||[];for(let V of Y)if(V.Name===`${q}.`&&(V.Type==="A"||V.Type==="AAAA")){if(V.AliasTarget){console.log(`Found orphaned Route53 ${V.Type} record for ${q}, cleaning up...`);try{await $.deleteRecord({HostedZoneId:S,RecordSet:V}),console.log(`Deleted orphaned Route53 ${V.Type} record for ${q}`)}catch(T){console.log(`Note: Could not delete Route53 record: ${T.message}`)}}}}catch{}}if(!U)try{if((await K.headBucket(F)).exists){console.log(`Found orphaned S3 bucket ${F}, cleaning up...`);try{let Y=K.emptyBucket(F).then(()=>K.deleteBucket(F)),V=new Promise((T,H)=>setTimeout(()=>H(Error("Bucket cleanup timeout")),30000));await Promise.race([Y,V]),console.log(`Deleted orphaned S3 bucket ${F}`)}catch(Y){console.log(`Note: Could not clean up S3 bucket: ${Y.message}`);let V=Date.now().toString(36);M=`${F}-${V}`,console.log(`Using alternative bucket name: ${M}`)}}}catch{}}let y=t({bucketName:M,domain:q,certificateArn:B,hostedZoneId:S,defaultRootObject:G.defaultRootObject,errorDocument:G.errorDocument}),R=Object.entries(G.tags||{}).map(([K,Z])=>({Key:K,Value:Z}));R.push({Key:"ManagedBy",Value:"ts-cloud"}),R.push({Key:"Application",Value:G.siteName});let N,I=!1;if(x){I=!0,console.log(`Updating CloudFormation stack: ${J}`),console.log(`Using existing bucket: ${M}`),console.log(`Domain: ${q||"not specified"}`),console.log(`Certificate ARN: ${B||"not specified"}`);try{N=(await _.updateStack({stackName:J,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:R})).StackId,console.log(`Update initiated, stack ID: ${N}`)}catch(K){if(K.message?.includes("No updates are to be performed")){let Z=await _.describeStacks({stackName:J});N=Z.Stacks[0].StackId;let U=Z.Stacks[0]?.Outputs||[],X=(Y)=>U.find((V)=>V.OutputKey===Y)?.OutputValue;return{success:!0,stackId:N,stackName:J,bucket:X("BucketName")||M,distributionId:X("DistributionId"),distributionDomain:X("DistributionDomain"),domain:q,certificateArn:B,message:"Static site infrastructure is already up to date"}}else throw K}}else console.log(`Creating CloudFormation stack: ${J}`),console.log(`Bucket name: ${M}`),console.log(`Domain: ${q||"not specified"}`),console.log(`Certificate ARN: ${B||"not specified"}`),console.log("Stack does not exist, creating..."),N=(await _.createStack({stackName:J,templateBody:JSON.stringify(y),capabilities:["CAPABILITY_IAM"],tags:R,onFailure:"DELETE"})).StackId,console.log(`Create initiated, stack ID: ${N}`);console.log(`Waiting for stack to reach ${I?"stack-update-complete":"stack-create-complete"}...`);try{await _.waitForStack(J,I?"stack-update-complete":"stack-create-complete"),console.log("Stack operation completed successfully!")}catch(K){if(K.message?.includes("must be verified")||K.message?.includes("Access denied for operation")||K.message?.includes("failed")){console.log("CloudFormation deployment failed, trying direct API creation...");let Z=new p;if(q)try{let U=await Z.listDistributions();for(let X of U){let Y=[];if(X.Aliases?.Items){if(Array.isArray(X.Aliases.Items))Y=X.Aliases.Items;else if(typeof X.Aliases.Items==="object"){let V=X.Aliases.Items.CNAME;if(typeof V==="string")Y=[V];else if(Array.isArray(V))Y=V}}if(Y.includes(q)){console.log(`Found existing CloudFront distribution ${X.Id} with alias ${q}`);let T=(await Z.getDistributionConfig(X.Id)).DistributionConfig?.Origins?.Items,H;if(T){let L=[];if(Array.isArray(T))L=T;else if(T.Origin)L=Array.isArray(T.Origin)?T.Origin:[T.Origin];else L=[T];for(let v of L){let b=(v.DomainName||"").match(/^([^.]+)\.s3[\.-]/);if(b){H=b[1];break}}}if(H)return console.log(`Using existing S3 bucket: ${H}`),{success:!0,stackName:`existing-${X.Id}`,bucket:H,distributionId:X.Id,distributionDomain:X.DomainName,domain:q,certificateArn:B,message:"Using existing CloudFront distribution (account verification pending for new distributions)"}}}}catch{}console.log("No existing infrastructure found, creating via direct API calls...");try{let U=new w(Q);if((await U.headBucket(M)).exists)console.log(`Using existing S3 bucket: ${M}`);else console.log(`Creating S3 bucket: ${M}...`),await U.createBucket(M);await U.putBucketWebsite(M,{IndexDocument:G.defaultRootObject||"index.html",ErrorDocument:G.errorDocument||"404.html"}),await U.putPublicAccessBlock(M,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!1,RestrictPublicBuckets:!1}),console.log(`S3 bucket ${M} configured`);let Y=`OAC-${M}`;console.log(`Creating Origin Access Control: ${Y}...`);let V=await Z.findOrCreateOriginAccessControl(Y);console.log(`Origin Access Control ${V.Id} ready`),console.log("Creating CloudFront distribution...");let T=await Z.createDistributionForS3({bucketName:M,bucketRegion:Q,originAccessControlId:V.Id,aliases:q?[q]:[],certificateArn:B,defaultRootObject:G.defaultRootObject||"index.html",comment:`Distribution for ${q||M}`});console.log(`CloudFront distribution ${T.Id} created`),console.log("Updating S3 bucket policy...");let H=p.getS3BucketPolicyForCloudFront(M,T.ARN);if(await U.putBucketPolicy(M,H),console.log("S3 bucket policy updated"),q&&S){console.log(`Creating Route53 records for ${q}...`);try{await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"A",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:T.DomainName,EvaluateTargetHealth:!1}),await $.createAliasRecord({HostedZoneId:S,Name:q,Type:"AAAA",TargetHostedZoneId:D.CloudFrontHostedZoneId,TargetDNSName:T.DomainName,EvaluateTargetHealth:!1}),console.log(`Route53 records created for ${q}`)}catch(L){console.log(`Note: Could not create Route53 records: ${L.message}`)}}return{success:!0,stackName:`direct-${T.Id}`,bucket:M,distributionId:T.Id,distributionDomain:T.DomainName,domain:q,certificateArn:B,message:"Static site infrastructure created via direct API calls"}}catch(U){return console.log(`Direct API creation failed: ${U.message}`),{success:!1,stackId:N,stackName:J,bucket:M,message:`Deployment failed: ${U.message}`}}}return{success:!1,stackId:N,stackName:J,bucket:M,message:`Stack deployment failed: ${K.message}`}}let E=(await _.describeStacks({stackName:J})).Stacks[0]?.Outputs||[],O=(K)=>E.find((Z)=>Z.OutputKey===K)?.OutputValue;return{success:!0,stackId:N,stackName:J,bucket:O("BucketName")||M,distributionId:O("DistributionId"),distributionDomain:O("DistributionDomain"),domain:q,certificateArn:B,message:"Static site infrastructure deployed successfully"}}async function i(G){let{sourceDir:Q,bucket:z,region:q,cacheControl:F="max-age=31536000, public",onProgress:J}=G,_=new w(q),{readdir:$}=await import("node:fs/promises"),{join:W,relative:j}=await import("node:path"),{createHash:S}=await import("node:crypto");async function B(E){let O=[],K=await $(E,{withFileTypes:!0});for(let Z of K){let U=W(E,Z.name);if(Z.isDirectory())O.push(...await B(U));else O.push(U)}return O}function x(E){let O=E.split(".").pop()?.toLowerCase();return{html:"text/html; charset=utf-8",css:"text/css; charset=utf-8",js:"application/javascript; charset=utf-8",json:"application/json; charset=utf-8",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",svg:"image/svg+xml",ico:"image/x-icon",webp:"image/webp",woff:"font/woff",woff2:"font/woff2",ttf:"font/ttf",xml:"application/xml",txt:"text/plain; charset=utf-8",sh:"text/plain; charset=utf-8",bash:"text/plain; charset=utf-8",ps1:"text/plain; charset=utf-8"}[O||""]||"application/octet-stream"}function C(E){return S("md5").update(E).digest("hex")}async function M(){let E=new Map,O;do{let K=await _.listObjects({bucket:z,maxKeys:1000,continuationToken:O});for(let Z of K.objects){let U=Z.ETag?.replace(/"/g,"")||"";E.set(Z.Key,U)}O=K.nextContinuationToken}while(O);return E}let y=await B(Q),R=[],N=0,I=0,h=await M();for(let E of y){let O=j(Q,E),K=x(E),Z=E.endsWith(".html")?"max-age=3600, public":F;try{let U=Buffer.from(await Bun.file(E).arrayBuffer()),X=C(U),Y=h.get(O);if(Y&&Y===X){I++,J?.(N+I,y.length,O);continue}await _.putObject({bucket:z,key:O,body:U,contentType:K,cacheControl:Z}),N++,J?.(N+I,y.length,O)}catch(U){R.push(`Failed to upload ${O}: ${U.message}`)}}return{uploaded:N,skipped:I,errors:R}}async function qq(G){return{invalidationId:(await new p().invalidateAll(G)).Id}}async function jq(G,Q="us-east-1"){let z=new l(Q);try{let _=((await z.describeStacks({stackName:G})).Stacks[0]?.Outputs||[]).find(($)=>$.OutputKey==="BucketName")?.OutputValue;if(_)await new w(Q).emptyBucket(_)}catch{}await z.deleteStack(G);let q=await z.waitForStackComplete(G,60,1e4);return{success:q.success||q.status==="DELETE_COMPLETE",message:q.success?"Static site deleted successfully":`Deletion failed: ${q.status}`}}async function Mq(G){let{sourceDir:Q,cleanBucket:z=!1,onProgress:q,...F}=G;q?.("infrastructure","Deploying CloudFormation stack...");let J=await o(F);if(!J.success)return J;if(z){q?.("clean","Cleaning old files from S3...");try{await new w(F.region||"us-east-1").emptyBucket(J.bucket)}catch(W){console.log(`Note: Could not clean bucket: ${W.message}`)}}q?.("upload","Uploading files to S3...");let _=await i({sourceDir:Q,bucket:J.bucket,region:F.region||"us-east-1",cacheControl:F.cacheControl,onProgress:(W,j,S)=>{q?.("upload",`${W}/${j}: ${S}`)}});if(_.errors.length>0)return{...J,success:!1,message:`Upload errors: ${_.errors.join(", ")}`,filesUploaded:_.uploaded};if(J.distributionId&&_.uploaded>0)q?.("invalidate","Invalidating CloudFront cache..."),await qq(J.distributionId);q?.("complete","Deployment complete!");let $=_.skipped>0?`Deployed ${_.uploaded} files (${_.skipped} unchanged)`:`Deployed ${_.uploaded} files successfully`;return{...J,filesUploaded:_.uploaded,filesSkipped:_.skipped,message:$}}
-export{t as p,o as q,i as r,qq as s,jq as t,Mq as u,Hq as v};

package/dist/bin/chunk-tga3hhwk.js

@@ -1,6 +0,0 @@
-import{nh as o,oh as n}from"./chunk-rxcvf10f.js";function dj(j,Z){return`/var/www/${j}-${Z}`}var Hj=new Set(["laravel","php","statamic","wordpress"]);function i(j){return j.type!=null&&Hj.has(j.type)}function Yj(j){let Z=j.proxyTo;if(Z==null)return[];return(Array.isArray(Z)?Z:[Z]).map((z)=>String(z).trim()).filter((z)=>z.length>0)}function Fj(j){return Yj(j).length>0}function t(j){if(j.deploy)return j.deploy;if(i(j))return"server";if(j.start)return"server";return"bucket"}function f(j){if(j.redirect)return"redirect";if(Fj(j))return"proxy";if(i(j))return"server-php";if(t(j)==="bucket")return"bucket";return j.start?"server-app":"server-static"}function wj(j){return j.infrastructure?.compute!=null||Boolean(j.cloud?.attachTo?.trim())}function pj(j,Z={}){let $=[],z=[],Q=j.sites||{},W=wj(j),q=n(j);if(q)$.push(q);let H=new Map;for(let[K,X]of Object.entries(Q)){if(!X)continue;let F=t(X),L=f(X);if(L==="redirect"){if(!X.domain)$.push(`Site '${K}' is a redirect site but has no \`domain\` to redirect from.`);if(!(typeof X.redirect==="string"?X.redirect:X.redirect?.to))$.push(`Site '${K}' is a redirect site but has no redirect target (\`redirect\` / \`redirect.to\`).`);if(!W)$.push(`Site '${K}' is a redirect site but no \`infrastructure.compute\` is configured to host the gateway that serves the redirect.`);let J=[];if(X.start)J.push("start");if(X.root)J.push("root");if(X.proxyTo)J.push("proxyTo");if(J.length>0)z.push(`Site '${K}' is a redirect site but also sets ${J.join(", ")}. These are ignored.`);continue}if(L==="proxy"){if(!X.domain)$.push(`Site '${K}' is a proxy site but has no \`domain\` to route from.`);if(!W)$.push(`Site '${K}' is a proxy site but no \`infrastructure.compute\` is configured to host the gateway that forwards it.`);let M=[];if(X.start)M.push("start");if(X.root)M.push("root");if(typeof X.port==="number")M.push("port");if(X.build)M.push("build");if(X.preStart&&X.preStart.length>0)M.push("preStart");if(M.length>0)z.push(`Site '${K}' sets \`proxyTo\`, so ts-cloud ships and supervises nothing for it. ${M.join(", ")} ${M.length===1?"is":"are"} ignored — remove ${M.length===1?"it":"them"}, or drop \`proxyTo\` to let ts-cloud own the service.`);continue}if(F==="server"&&!X.start&&!X.root){$.push(`Site '${K}' sets deploy:'server' but declares neither \`start\` (dynamic app) nor \`root\` (static site to serve). Add one.`);continue}if(L==="server-php"){if(!W)$.push(`Site '${K}' is a PHP site (type:'${X.type}') but no \`infrastructure.compute\` is configured. Add a server (infrastructure.compute) with PHP provisioning.`);if(!X.repository?.url)$.push(`Site '${K}' is a PHP site (type:'${X.type}') but has no \`repository.url\` to clone. PHP sites deploy via git.`)}else if(L==="server-app"){if(!W)$.push(`Site '${K}' deploys to a server (deploy:'server'${X.deploy?"":" inferred from `start`"}) but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`);if(typeof X.port==="number"){let M=Z.occupiedPorts?.get(X.port);if(M)$.push(`Site '${K}' wants port ${X.port}, which project '${M}' already serves on this box. Attached projects share one port namespace. Give '${K}' a free port, or let the attach allocate one.`);let J=H.get(X.port);if(J)$.push(`Sites '${J}' and '${K}' both use port ${X.port}. Server apps sharing a box must use distinct ports.`);else H.set(X.port,K)}}else if(L==="server-static"){if(!X.root)$.push(`Site '${K}' is a server static site (deploy:'server', no \`start\`) but has no \`root\` directory to serve.`);if(!W)$.push(`Site '${K}' deploys to a server (deploy:'server') but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`)}else{if(!X.root)$.push(`Site '${K}' deploys to a bucket but has no \`root\` directory to upload.`);let M=[];if(X.start)M.push("start");if(typeof X.port==="number")M.push("port");if(X.preStart&&X.preStart.length>0)M.push("preStart");if(M.length>0)z.push(`Site '${K}' deploys to a bucket but sets server-only field(s): ${M.join(", ")}. These are ignored. Set deploy:'server' to use them.`)}}return{errors:$,warnings:z}}function rj(j){let Z=f(j);return Z!=="bucket"&&Z!=="redirect"&&Z!=="proxy"}function oj(j){return f(j)==="bucket"}function nj(j,Z){if(o(j)==="serverless")return!0;let $=Object.entries(j.sites??{}).filter(([,Q])=>Q!=null),z=Z?$.filter(([Q])=>Q===Z):$;if(z.length===0)return!0;return!z.every(([,Q])=>{let W=f(Q);return W==="redirect"||W==="proxy"})}var s={php:"php.net",nginx:"nginx.org",composer:"getcomposer.org",mysql:"mysql.com",mariadb:"mariadb.com/server",postgres:"postgresql.org",vitess:"vitess.io",etcd:"etcd.io",redis:"redis.io",memcached:"memcached.org",meilisearch:"meilisearch.com",git:"git-scm.com",certbot:"certbot.eff.org",bun:"bun.sh",node:"nodejs.org",deno:"deno.land"};var y="/opt/pantry";function v(j){return`'${j.split("'").join("'\\''")}'`}function tj(j={}){return["export DEBIAN_FRONTEND=noninteractive","export PANTRY_SERVICE_SCOPE=system","export PANTRY_INSTALL_DIR=/usr/local/bin",j.version?`export PANTRY_VERSION=${v(j.version)}`:'export PANTRY_VERSION="${PANTRY_VERSION:-latest}"',"command -v curl >/dev/null 2>&1 || (apt-get update -y && apt-get install -y curl ca-certificates)","command -v unzip >/dev/null 2>&1 || (apt-get update -y && apt-get install -y unzip)",'OS=$(uname -s | tr \'[:upper:]\' \'[:lower:]\'); ARCH=$(uname -m); case "$ARCH" in x86_64|amd64) ARCH=x64 ;; arm64|aarch64) ARCH=arm64 ;; esac; ZIP="pantry-${OS}-${ARCH}.zip"; if [ "${PANTRY_VERSION:-latest}" = latest ]; then REL=\'latest/download\'; else REL="download/v${PANTRY_VERSION}"; fi; TMP=$(mktemp -d); curl -fsSL -o "${TMP}/${ZIP}" "https://github.com/pantry-pm/pantry/releases/${REL}/${ZIP}"; unzip -o "${TMP}/${ZIP}" -d /usr/local/bin; chmod +x /usr/local/bin/pantry; rm -rf "${TMP}"','export PATH="/usr/local/bin:$PATH"',"mkdir -p /opt/pantry"]}function T(){return'eval "$(cd /opt/pantry && pantry env 2>/dev/null)" || true'}function m(j){if(j.length===0)return[];return[`(cd /opt/pantry && pantry install ${[...new Set(j)].map(v).join(" ")})`]}function a(j){return[...new Set(j)].flatMap((Z)=>[`(cd /opt/pantry && pantry start ${v(Z)})`,`(cd /opt/pantry && pantry enable ${v(Z)})`])}var w=`${y}/pantry/.bin`,h=15306,b=15991,E=15999,e=16101,P=2379,B="/var/lib/vitess",g=100;function Bj(j){return j===!0||typeof j==="object"&&j!==null}function Dj(j){return typeof j==="object"&&j!==null?j:{}}function G(j){return`'${String(j).split("'").join("'\\''")}'`}function Lj(j){let $=[j.version?`vitess.io@${j.version}`:"vitess.io"];if(j.mode!=="combo"&&!j.etcdEndpoint)$.push("etcd.io");return $.push("mysql.com@8.0.43"),$}var Y="vitess",Nj=`${w}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`,zj="/usr/local/lib/vitess",l=new Map;function u(j){return`${zj}/${j}.sh`}function O(j,Z){return l.set(j,Cj(Z)),`/bin/sh ${u(j)}`}function jj(){let j=[`mkdir -p ${zj}`];for(let[Z,$]of l)j.push(`cat > ${u(Z)} <<'TS_CLOUD_VITESS_LAUNCHER_EOF'`,$,"TS_CLOUD_VITESS_LAUNCHER_EOF",`chmod 0755 ${u(Z)}`);return j}function Cj(j){return["#!/bin/sh","set -e",`cd ${y}`,`PANTRY_ENV="$(pantry env 2>/dev/null | grep -E '^(export [A-Za-z_]|[A-Za-z_][A-Za-z0-9_]*=)' || true)"`,'if [ -n "$PANTRY_ENV" ]; then eval "$PANTRY_ENV"; fi',`VT_MYSQL_ROOT="$(dirname "$(dirname "$(readlink -f ${w}/mysqld 2>/dev/null)")")"`,`VTROOT="$(dirname "$(dirname "$(readlink -f ${w}/mysqlctld 2>/dev/null)")")"`,"export VT_MYSQL_ROOT VTROOT",'LD_LIBRARY_PATH="$VT_MYSQL_ROOT/lib:$VTROOT/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"',"export LD_LIBRARY_PATH",`exec ${j.join(" ")}`].join(`
-`)}function V(j){let Z=["[Unit]",`Description=${j.description}`,`After=network.target${j.after?.length?` ${j.after.join(" ")}`:""}`];if(j.requires?.length)Z.push(`Requires=${j.requires.join(" ")}`);return Z.push("","[Service]","Type=simple",`User=${Y}`,`Group=${Y}`,`Environment="PATH=${Nj}"`,`Environment="VTDATAROOT=${B}"`,...Object.entries(j.environment??{}).map(([$,z])=>`Environment="${$}=${z}"`),...(j.execStartPre??[]).map(($)=>`ExecStartPre=${$}`),`ExecStart=${j.execStart}`,"Restart=always","RestartSec=5","LimitNOFILE=65535","","[Install]","WantedBy=multi-user.target"),Z.join(`
-`)}function Zj(j,Z){return[`cat > /etc/systemd/system/${j}.service <<'TS_CLOUD_VITESS_UNIT_EOF'`,Z,"TS_CLOUD_VITESS_UNIT_EOF"]}function Oj(j){let Z=j.cell??"zone1",$=j.vtgatePort??h,Q=`${((j.keyspaces?.length)?j.keyspaces:[{name:"app"}]).map((W)=>{let q=(W.sharded?["-80","80-"]:["0"]).map((H)=>`shards:{name:"${H}"}`).join(" ");return`keyspaces:{name:"${W.name}" ${q}}`}).join(" ")} cells:"${Z}"`;return V({description:"Vitess (vtcombo, single-process development stack)",execStart:O("vtcombo",[`${w}/vtcombo`,`--cell ${Z}`,`--proto-topo ${G(Q)}`,`--mysql-server-port ${$}`,"--mysql-server-bind-address 127.0.0.1","--mysql-auth-server-impl none","--start-mysql",`--port ${b}`,`--grpc-port ${E}`])})}function Vj(){return V({description:"etcd (Vitess topology store)",execStart:O("etcd",[`${w}/etcd`,`--data-dir ${B}/etcd`,`--listen-client-urls http://127.0.0.1:${P}`,`--advertise-client-urls http://127.0.0.1:${P}`]),execStartPre:[`+/bin/mkdir -p ${B}/etcd`,`+/bin/chown ${Y}:${Y} ${B}/etcd`]})}function c(j){return["--topo-implementation etcd2",`--topo-global-server-address ${j.etcdEndpoint??`http://127.0.0.1:${P}`}`,"--topo-global-root /vitess/global"]}function Uj(j){let Z=!j.etcdEndpoint;return V({description:"Vitess vtctld (control plane)",after:Z?["vitess-etcd.service"]:[],requires:Z?["vitess-etcd.service"]:[],execStart:O("vtctld",[`${w}/vtctld`,...c(j),`--cell ${j.cell??"zone1"}`,"--service-map grpc-vtctl,grpc-vtctld",`--grpc-port ${E}`,`--port ${E+1}`])})}function Aj(j,Z,$){let z=j.cell??"zone1";return V({description:`Vitess vttablet (${Z}/${$})`,after:["vitess-vtctld.service","vitess-mysqlctld.service"],requires:["vitess-mysqlctld.service"],execStart:O("vttablet",[`${w}/vttablet`,...c(j),`--tablet-path ${z}-${String(g).padStart(10,"0")}`,`--init-keyspace ${Z}`,`--init-shard ${$}`,"--init-tablet-type replica",`--service-map ${G("grpc-queryservice,grpc-tabletmanager,grpc-updatestream")}`,`--port ${e}`,`--grpc-port ${e+1}`,`--db-port ${j.mysqlPort??3306}`,`--mycnf-mysql-port ${j.mysqlPort??3306}`])})}function kj(j){return V({description:"Vitess mysqlctld (managed mysqld)",execStart:O("mysqlctld",[`${w}/mysqlctld`,`--tablet-uid ${g}`,`--mysql-port ${j.mysqlPort??3306}`,'--init-db-sql-file "$VTROOT/config/init_db.sql"',"--wait-time 2m"]),execStartPre:[`+/bin/mkdir -p ${B}`,`+/bin/chown ${Y}:${Y} ${B}`]})}var Wj="/etc/vitess/auth.json",A="/var/lib/vitess/vtgate-auth.sha256";function Rj(j){let Z=j.username??"vitess",$=j.password??"";return["mkdir -p /etc/vitess",'VTESS_AUTH_TMP="$(mktemp)"',`cat > "$VTESS_AUTH_TMP" <<'TS_CLOUD_VITESS_AUTH_EOF'`,JSON.stringify({[Z]:[{Password:$,UserData:Z}]}),"TS_CLOUD_VITESS_AUTH_EOF",`VTESS_VTGATE_AUTH_SHA="$(sha256sum "$VTESS_AUTH_TMP" | awk '{print $1}')"`,"VTESS_VTGATE_AUTH_CHANGED=1",`if [ -f ${A} ] && [ "$(cat ${A})" = "$VTESS_VTGATE_AUTH_SHA" ]; then VTESS_VTGATE_AUTH_CHANGED=0; fi`,`install -o ${Y} -g ${Y} -m 0600 "$VTESS_AUTH_TMP" ${Wj}`,'rm -f "$VTESS_AUTH_TMP"']}function Ij(j){let Z=j.cell??"zone1";return V({description:"Vitess vtgate (query router)",after:["vitess-vtctld.service"],execStart:O("vtgate",[`${w}/vtgate`,...c(j),`--cell ${Z}`,`--cells-to-watch ${Z}`,"--tablet-types-to-wait PRIMARY,REPLICA",`--service-map ${G("grpc-vtgateservice")}`,`--mysql-server-port ${j.vtgatePort??h}`,`--mysql-server-bind-address ${j.bindAddress??"127.0.0.1"}`,"--mysql-auth-server-impl static",`--mysql-auth-server-static-file ${Wj}`,`--port ${b}`,`--grpc-port ${b+1}`])})}function fj(j){let Z=j.cell??"zone1",$=j.etcdEndpoint??`http://127.0.0.1:${P}`,z=`${w}/vtctldclient --server 127.0.0.1:${E}`,Q=[`for i in $(seq 1 30); do ${z} GetCellInfoNames >/dev/null 2>&1 && break; sleep 2; done`,`if ! ${z} GetCellInfoNames 2>/dev/null | grep -qx ${G(Z)}; then`,`  ${z} AddCellInfo --root ${G(`/vitess/${Z}`)} --server-address ${G($)} ${G(Z)}`,"fi"];for(let W of j.keyspaces??[]){let q=W.sharded?" --sharded":"";Q.push(`if ! ${z} GetKeyspace ${G(W.name)} >/dev/null 2>&1; then`,`  ${z} CreateKeyspace${q} ${G(W.name)}`,"fi");let H=`${Z}-${String(g).padStart(10,"0")}`;for(let K of W.sharded?["-80","80-"]:["0"]){let X=`${W.name}/${K}`;Q.push("for i in $(seq 1 90); do",`  if ${z} GetShard ${G(X)} 2>/dev/null | grep -q '"is_primary_serving": *true'; then break; fi`,`  ${z} PlannedReparentShard ${G(X)} --new-primary ${G(H)} >/dev/null 2>&1 && break`,`  ${z} InitShardPrimary --force ${G(X)} ${G(H)} >/dev/null 2>&1 && break`,"  sleep 2","done",`if ! ${z} GetShard ${G(X)} 2>/dev/null | grep -q '"is_primary_serving": *true'; then`,`  echo "no primary could be elected for ${X}" >&2; exit 1`,"fi")}Q.push(`${z} RebuildKeyspaceGraph ${G(W.name)} >/dev/null`)}return Q}function $j(j){let Z=j.vtgatePort??h;return["for i in $(seq 1 60); do",`  if (cd ${y} && eval "$(pantry env 2>/dev/null)"; MYSQL_PWD=${G(j.password??"")} ${w}/mysql -h 127.0.0.1 -P ${Z} -u ${G(j.username??"vitess")} --connect-timeout=2 -e 'SHOW KEYSPACES') >/dev/null 2>&1; then`,`    echo "vtgate is serving on ${Z}"; exit 0`,"  fi","  sleep 2","done",`echo "vtgate did not become ready on port ${Z}" >&2`,"exit 1"]}function Xj(j){if(!Bj(j))return[];let Z=Dj(j),$=Z.mode==="combo";l.clear();let z=[...m(Lj(Z)),`VT_MYSQL_LIB="$(dirname "$(dirname "$(readlink -f ${w}/mysqld)")")/lib"`,'if [ -d "$VT_MYSQL_LIB" ]; then',`  printf '%s\\n' "$VT_MYSQL_LIB" > /etc/ld.so.conf.d/vitess-mysql.conf`,"  ldconfig","else",'  echo "mysqld library directory not found under $VT_MYSQL_LIB" >&2; exit 1',"fi",`id -u ${Y} >/dev/null 2>&1 || useradd --system --home-dir ${B} --shell /usr/sbin/nologin ${Y}`,`mkdir -p ${B}`,`chown -R ${Y}:${Y} ${B}`];if($)return z.push(...Zj("vitess-vtcombo",Oj(Z)),...jj(),"systemctl daemon-reload","systemctl enable --now vitess-vtcombo.service",...$j(Z)),z;z.push(...Rj(Z));let Q=[];if(!Z.etcdEndpoint)Q.push(["vitess-etcd",Vj()]);Q.push(["vitess-vtctld",Uj(Z)],["vitess-mysqlctld",kj(Z)],["vitess-vtgate",Ij(Z)]);for(let W of Z.keyspaces??[])for(let q of W.sharded?["-80","80-"]:["0"])Q.push([`vitess-vttablet-${W.name}-${q.replace(/-/g,"x")}`,Aj(Z,W.name,q)]);for(let[W,q]of Q)z.push(...Zj(W,q));z.push(...jj()),z.push("systemctl daemon-reload");for(let[W]of Q)z.push(`systemctl enable --now ${W}.service`);return z.push(`if [ "$VTESS_VTGATE_AUTH_CHANGED" = 1 ]; then systemctl restart vitess-vtgate.service; printf '%s\\n' "$VTESS_VTGATE_AUTH_SHA" > ${A}; chown ${Y}:${Y} ${A}; chmod 0600 ${A}; fi`,...fj(Z),...$j(Z)),z}var vj=new Set(["singlestore","vitess"]);function Jj(j){if(j?.engine&&vj.has(j.engine))return!1;return!j?.host||j.host==="127.0.0.1"||j.host==="localhost"}function d(j,Z="psql"){let $=j?.port??5432;if(Jj(j))return`${Z} -p ${$} -U postgres`;let z=j?.username||"postgres";return`${j?.password?`PGPASSWORD='${j.password.replace(/'/g,"'\\''")}' `:""}${Z} -h ${j.host} -p ${$} -U ${z} -w`}function D(j){return j===!0||typeof j==="object"&&j!=null}function yj(j){let Z=[],$=[];if(D(j.mysql))Z.push(typeof j.mysql==="object"&&j.mysql.version?`mysql.com@${j.mysql.version}`:"mysql.com@8.0.43"),$.push("mysql");else if(D(j.mariadb))Z.push(s.mariadb),$.push("mariadb");if(D(j.postgres))Z.push("postgresql.org"),$.push("postgres");if(D(j.redis))Z.push("redis.io"),$.push("redis");if(D(j.memcached))Z.push("memcached.org"),$.push("memcached");if(D(j.meilisearch))Z.push("meilisearch.com"),$.push("meilisearch");return{packages:Z,services:$}}function $Z(j={},Z={}){let $=yj(j),z=Xj(j.vitess);if($.packages.length===0)return z;return[...m($.packages),...a($.services),...z]}function zZ(j,Z={}){if(!j?.name)return[];if(!Jj(j))return[];let $=j.name,z=j.username||$,Q=j.password||"",W=D(Z.postgres)||j.engine==="postgres",q=D(Z.mariadb)||j.engine==="mariadb",H=D(Z.mysql)||j.engine==="mysql";if(W&&!H&&!q){let J=(x)=>`"${x.replace(/"/g,'""')}"`,C=(x)=>`'${x.replace(/'/g,"''")}'`,U=(x,I)=>["DO $$ BEGIN",`  IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = ${C(x)}) THEN`,`    CREATE ROLE ${J(x)} LOGIN PASSWORD ${C(I)};`,"  ELSE",`    ALTER ROLE ${J(x)} LOGIN PASSWORD ${C(I)};`,"  END IF;","END $$;"],k=(x)=>{let I=x.databases&&x.databases.length>0?x.databases:[$],_=[];for(let S of I)if(x.access==="readonly")_.push(`GRANT CONNECT ON DATABASE ${J(S)} TO ${J(x.username)};`,`\\connect ${J(S)}`,`GRANT USAGE ON SCHEMA public TO ${J(x.username)};`,`GRANT SELECT ON ALL TABLES IN SCHEMA public TO ${J(x.username)};`,`ALTER DEFAULT PRIVILEGES FOR ROLE ${J(z)} IN SCHEMA public GRANT SELECT ON TABLES TO ${J(x.username)};`,"\\connect postgres");else _.push(`GRANT ALL PRIVILEGES ON DATABASE ${J(S)} TO ${J(x.username)};`);return _},R=j.users||[],Gj=j.port??5432;return[T(),`for i in $(seq 1 30); do pg_isready -p ${Gj} -q && break; sleep 2; done`,`${d(j)} <<'TS_CLOUD_PG_EOF'`,...U(z,Q),`SELECT 'CREATE DATABASE ${J($)} OWNER ${J(z)}' WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = ${C($)})\\gexec`,...R.flatMap((x)=>[...U(x.username,x.password),...k(x)]),"TS_CLOUD_PG_EOF"]}let K=q?"/var/lib/pantry/mariadb/mariadbd.sock":"/var/lib/pantry/mysql/mysqld.sock",X=(J)=>J.replace(/`/g,"``"),F=(J)=>J.replace(/\\/g,"\\\\").replace(/'/g,"\\'"),L=(J)=>{let C=J.databases&&J.databases.length>0?J.databases:[$],U=J.access==="readonly"?"SELECT":"ALL PRIVILEGES",k=[`CREATE USER IF NOT EXISTS '${F(J.username)}'@'%' IDENTIFIED BY '${F(J.password)}';`,`CREATE USER IF NOT EXISTS '${F(J.username)}'@'localhost' IDENTIFIED BY '${F(J.password)}';`,`ALTER USER '${F(J.username)}'@'%' IDENTIFIED BY '${F(J.password)}';`,`ALTER USER '${F(J.username)}'@'localhost' IDENTIFIED BY '${F(J.password)}';`];for(let R of C)k.push(`GRANT ${U} ON \`${X(R)}\`.* TO '${F(J.username)}'@'%';`,`GRANT ${U} ON \`${X(R)}\`.* TO '${F(J.username)}'@'localhost';`);return k},M=j.users||[];return[T(),`for i in $(seq 1 30); do mysqladmin --socket=${K} -u root ping 2>/dev/null | grep -q alive && break; sleep 2; done`,`mysql --socket=${K} -u root <<'TS_CLOUD_SQL_EOF'`,`CREATE DATABASE IF NOT EXISTS \`${X($)}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;`,...L({username:z,password:Q}),...M.flatMap(L),"FLUSH PRIVILEGES;","TS_CLOUD_SQL_EOF"]}function WZ(j){if(!j?.name)return{};let Z=j.engine==="singlestore",$=j.engine==="vitess",z=j.engine==="postgres"?"pgsql":Z?"singlestore":$?"vitess":"mysql",Q=j.port??(j.engine==="postgres"?5432:$?15306:3306),W={DB_CONNECTION:z,DB_HOST:j.host||"127.0.0.1",DB_PORT:String(Q),DB_DATABASE:j.name};if(j.username)W.DB_USERNAME=j.username;if(j.password)W.DB_PASSWORD=j.password;if((Z||$)&&j.ssl!==!1)W.DB_SSL="true";return W}var r="/var/backups/ts-cloud",mj="/etc/ts-cloud/backups.config.ts",Qj="/etc/cron.d/ts-cloud-backups",p="/usr/local/bin/ts-cloud-backup.sh";function Ej(j){if(!j.name)return null;let Z=j.host||"127.0.0.1",$=j.engine==="postgres",z=$?"postgresql":"mysql",Q=j.port??($?5432:3306),W=(q)=>q.replace(/\\/g,"\\\\").replace(/'/g,"\\'");return["  {",`    type: '${z}',`,`    name: '${W(j.name)}',`,"    connection: {",`      hostname: '${W(Z)}',`,`      port: ${Q},`,`      database: '${W(j.name)}',`,`      username: '${W(j.username||j.name)}',`,`      password: '${W(j.password||"")}',`,"      ssl: false,","    },","    includeSchema: true,","    includeData: true,","  },"].join(`
-`)}function Pj(j,Z){let $=j?Ej(j):null,z=Z.bucket?["  destinations: [","    {","      type: 's3',",`      bucket: '${Z.bucket}',`,"      prefix: 'db-backups',",...Z.endpoint?[`      endpoint: '${Z.endpoint}',`]:[],"      optional: false,","    },","  ],"]:[];return["import type { BackupConfig } from 'ts-backups'","","const config: BackupConfig = {","  verbose: true,",`  outputPath: '${r}',`,"  retention: {",`    count: ${Z.retentionCount??5},`,`    maxAge: ${Z.retentionDays??30},`,"  },","  databases: [",...$?[$]:[],"  ],",...z,"}","","export default config",""].join(`
-`)}function QZ(j){let{database:Z,backups:$}=j;if(!$.enabled)return[];let z=$.schedule||"0 2 * * *",Q=Pj(Z,$);return["export DEBIAN_FRONTEND=noninteractive",`mkdir -p /etc/ts-cloud ${r}`,"command -v bun >/dev/null 2>&1 || (curl -fsSL https://bun.sh/install | bash && ln -sf /root/.bun/bin/bun /usr/local/bin/bun)","bun add -g ts-backups || true",`cat > ${mj} <<'TS_CLOUD_BACKUP_CFG_EOF'`,Q.replace(/\n$/,""),"TS_CLOUD_BACKUP_CFG_EOF",`cat > ${p} <<'TS_CLOUD_BACKUP_RUN_EOF'`,"#!/bin/bash","set -uo pipefail",'export PATH="/root/.bun/bin:/usr/local/bin:$PATH"','notify() { [ -x /usr/local/bin/ts-cloud-notify ] && /usr/local/bin/ts-cloud-notify "$1" || true; }',"cd /etc/ts-cloud",'if ! ts-backups backup --config /etc/ts-cloud/backups.config.ts; then notify "❌ ts-cloud backup failed"; exit 1; fi',"TS_CLOUD_BACKUP_RUN_EOF",`chmod +x ${p}`,`cat > ${Qj} <<'TS_CLOUD_BACKUP_CRON_EOF'`,`${z} root ${p} >> /var/log/ts-cloud-backup.log 2>&1`,"TS_CLOUD_BACKUP_CRON_EOF",`chmod 644 ${Qj}`]}function _j(j){return j==="mariadb"?"/var/lib/pantry/mariadb/mariadbd.sock":"/var/lib/pantry/mysql/mysqld.sock"}function qZ(j,Z={}){if(!j?.name)return[];let $=j.name,z=j.engine==="postgres",Q=Z.from?`TS_CLOUD_DUMP="${Z.from}"`:`TS_CLOUD_DUMP="$(find ${r} -type f -name '*${$}*.sql' -o -type f -name '*${$}*.sql.gz' 2>/dev/null | xargs -r ls -1t 2>/dev/null | head -1)"`,W=z?`${d(j)} -d "${$}"`:`mysql --socket=${_j(j.engine)} -u root "${$}"`;return["set -uo pipefail",'eval "$(cd /opt/pantry && pantry env 2>/dev/null)" || true',Q,'[ -n "$TS_CLOUD_DUMP" ] && [ -f "$TS_CLOUD_DUMP" ] || { echo "no backup dump found to restore" >&2; exit 1; }','echo "[ts-cloud] restoring '+$+' from $TS_CLOUD_DUMP"',`case "$TS_CLOUD_DUMP" in *.gz) gunzip -c "$TS_CLOUD_DUMP" ;; *) cat "$TS_CLOUD_DUMP" ;; esac | ${W}`,'echo "restore complete"']}var Kj=["storage",".env"],MZ=4;function N(j){return`${j.replace(/\/+$/,"")}/.ts-cloud`}function Sj(j){return`${N(j)}/deploy-history.log`}function Tj(j,Z){return`${N(j)}/deploys/${Z}.log`}function Mj(j){return`${N(j)}/shared-paths`}function xZ(j,Z){let $=j.replace(/\/+$/,"");return{base:$,releases:`${$}/releases`,shared:`${$}/shared`,current:`${$}/current`,release:`${$}/releases/${Z}`}}function bj(j){let Z=j.split("/").pop()||j;if(Z===".env"||Z.startsWith(".env."))return!0;return/\.[a-z0-9]+$/i.test(Z)}function uj(j){return typeof j==="string"?j:j.path}function GZ(j){let Z=new Map;for(let $ of j)Z.set(uj($),$);return[...Z.values()]}function xj(j,Z){if(typeof Z==="string")return{path:Z,target:`${j.shared}/${Z}`,seed:!0};return{path:Z.path,target:Z.target??`${j.shared}/${Z.path}`,seed:Z.seed!==!1}}function hj(j){return["ts_cloud_adopt_shared() {",'  TS_CLOUD_SP="$1"','  TS_CLOUD_DST="$2"',`  TS_CLOUD_SRC="${j.current}/$TS_CLOUD_SP"`,'  if [ -e "$TS_CLOUD_DST" ]; then return 0; fi','  if [ -L "$TS_CLOUD_SRC" ] || [ ! -e "$TS_CLOUD_SRC" ]; then return 0; fi','  mkdir -p "$(dirname "$TS_CLOUD_DST")"','  cp -a "$TS_CLOUD_SRC" "$TS_CLOUD_DST"',"  for TS_CLOUD_SIDECAR in -wal -shm; do",'    if [ -f "$TS_CLOUD_SRC$TS_CLOUD_SIDECAR" ]; then cp -a "$TS_CLOUD_SRC$TS_CLOUD_SIDECAR" "$TS_CLOUD_DST$TS_CLOUD_SIDECAR"; fi',"  done",'  echo "[ts-cloud] adopted $TS_CLOUD_SP from the live release into shared/ — it now survives deploys"',"  return 0","}"]}function HZ(j,Z=Kj){let $=[`mkdir -p ${j.releases} ${j.shared}`,...hj(j)],z=Z.map((W)=>xj(j,W));for(let{path:W,target:q,seed:H}of z){if(!H)continue;if($.push(`ts_cloud_adopt_shared '${W}' '${q}'`),bj(W))$.push(`mkdir -p "$(dirname ${q})"`,`touch ${q}`);else if(W==="storage")$.push(`mkdir -p ${q}/app/public`,`mkdir -p ${q}/framework/cache/data`,`mkdir -p ${q}/framework/sessions`,`mkdir -p ${q}/framework/testing`,`mkdir -p ${q}/framework/views`,`mkdir -p ${q}/logs`);else $.push(`mkdir -p ${q}`)}let Q=Mj(j.base);return $.push(`mkdir -p ${N(j.base)}`,`cat > ${Q} <<'TS_CLOUD_SHARED_PATHS_EOF'`,...z.map((W)=>`${W.path}	${W.target}`),"TS_CLOUD_SHARED_PATHS_EOF"),$}function YZ(j,Z=900){let $=`${N(j.base)}/deploy.lock`;return[`mkdir -p "$(dirname ${$})"`,`exec 9>${$}`,`flock -w ${Z} 9 || { echo "[ts-cloud] another deploy of this site has held the lock for ${Z}s — refusing to race it" >&2; exit 1; }`]}function FZ(j){let Z=`${j.release}.incoming`;return[`rm -rf ${Z}`,`mkdir -p ${Z}`,...gj(j),'if [ "$TS_CLOUD_IS_LIVE" = "yes" ]; then',`  TS_CLOUD_STAGED=${Z}`,"else",`  rm -rf ${j.release}`,`  mkdir -p ${j.release}`,`  rmdir ${Z}`,`  TS_CLOUD_STAGED=${j.release}`,"fi"]}function wZ(j){let Z=`TS_CLOUD_TRAP_LIVE="$(readlink -f ${j.current} 2>/dev/null || true)"`,$=`TS_CLOUD_TRAP_TARGET="$(readlink -f ${j.release} 2>/dev/null || echo ${j.release})"`;return`trap '${`if [ $? -ne 0 ]; then ${Z}; ${$}; [ "$TS_CLOUD_TRAP_LIVE" = "$TS_CLOUD_TRAP_TARGET" ] || rm -rf ${j.release}; fi`}' EXIT`}function gj(j){return[`TS_CLOUD_LIVE_PATH="$(readlink -f ${j.current} 2>/dev/null || true)"`,`TS_CLOUD_RELEASE_PATH="$(readlink -f ${j.release} 2>/dev/null || echo ${j.release})"`,'if [ -n "$TS_CLOUD_LIVE_PATH" ] && [ "$TS_CLOUD_LIVE_PATH" = "$TS_CLOUD_RELEASE_PATH" ]; then TS_CLOUD_IS_LIVE=yes; else TS_CLOUD_IS_LIVE=no; fi']}function BZ(j){let Z=`${j.release}.incoming`;return[`if [ "$TS_CLOUD_STAGED" = "${Z}" ]; then`,`  rm -rf ${j.release}.previous`,`  mv ${j.release} ${j.release}.previous`,`  mv ${Z} ${j.release}`,`  rm -rf ${j.release}.previous`,"fi"]}function DZ(j,Z=Kj){let $=[];for(let z of Z){let{path:Q,target:W,seed:q}=xj(j,z),H=`${j.release}/${Q}`,K=[`rm -rf ${H}`,`mkdir -p "$(dirname ${H})"`,`ln -sfn ${W} ${H}`];if(q){$.push(...K);continue}$.push(`if [ -e ${W} ]; then`,...K.map((X)=>`  ${X}`),"fi")}return $}function qj(j,Z){let $=Mj(j.base);return[`if [ -f ${$} ]; then`,'  while IFS="\t" read -r TS_CLOUD_SP TS_CLOUD_TGT; do','    [ -n "$TS_CLOUD_SP" ] || continue',`    [ -n "$TS_CLOUD_TGT" ] || TS_CLOUD_TGT="${j.shared}/$TS_CLOUD_SP"`,'    [ -e "$TS_CLOUD_TGT" ] || continue',`    rm -rf ${Z}/"$TS_CLOUD_SP"`,`    mkdir -p "$(dirname ${Z}/"$TS_CLOUD_SP")"`,`    ln -sfn "$TS_CLOUD_TGT" ${Z}/"$TS_CLOUD_SP"`,`  done < ${$}`,"fi"]}function LZ(j){return[`ln -sfn ${j.release} ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`]}function NZ(j,Z={}){let $=Z.to?[`[ -d ${j.releases}/${Z.to} ] || { echo "rollback target ${j.releases}/${Z.to} not found" >&2; exit 1; }`,...qj(j,`${j.releases}/${Z.to}`),`ln -sfn ${j.releases}/${Z.to} ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`]:[`TS_CLOUD_CURRENT=$(readlink -f ${j.current} 2>/dev/null || true)`,`TS_CLOUD_PREV=$(ls -1dt ${j.releases}/*/ 2>/dev/null | sed 's#/$##' | while read -r r; do [ "$(readlink -f "$r")" != "$TS_CLOUD_CURRENT" ] && { echo "$r"; break; }; done)`,'[ -n "$TS_CLOUD_PREV" ] || { echo "no previous release to roll back to" >&2; exit 1; }',...qj(j,'"$TS_CLOUD_PREV"'),`ln -sfn "$TS_CLOUD_PREV" ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`,'echo "rolled back to $TS_CLOUD_PREV"'];if(!Z.unitBase)return $;let z=Z.unitBase;return[...$,`TS_CLOUD_RB_ID=$(basename "$(readlink -f ${j.current})")`,`if [ -f /etc/systemd/system/${z}@.service ]; then systemctl start "${z}@\${TS_CLOUD_RB_ID}.service"; sleep 2; systemctl is-active --quiet "${z}@\${TS_CLOUD_RB_ID}.service" || { echo "rolled-back release failed to start" >&2; exit 1; }; systemctl enable "${z}@\${TS_CLOUD_RB_ID}.service" 2>/dev/null || true; systemctl list-units --plain --no-legend --type=service "${z}@*.service" 2>/dev/null | awk '{print $1}' | { grep -v "^${z}@\${TS_CLOUD_RB_ID}.service$" || true; } | while read -r TS_CLOUD_U; do systemctl stop "$TS_CLOUD_U" 2>/dev/null || true; systemctl disable "$TS_CLOUD_U" 2>/dev/null || true; done; elif [ -f /etc/systemd/system/${z}.service ]; then systemctl restart ${z}.service; fi`]}function CZ(j,Z=4){let $=Math.max(1,Z);return[`TS_CLOUD_CURRENT=$(readlink -f ${j.current} 2>/dev/null || true)`,`ls -1dt ${j.releases}/*/ 2>/dev/null | sed 's#/$##' | tail -n +${$+1} | while read -r TS_CLOUD_OLD; do`,'  [ "$(readlink -f "$TS_CLOUD_OLD")" = "$TS_CLOUD_CURRENT" ] || rm -rf "$TS_CLOUD_OLD"',"done"]}function lj(j){return`${N(j)}/owner`}function OZ(j,Z){let $=lj(j);return[`if [ -f "${$}" ]; then`,`  TS_CLOUD_OWNER=$(cat "${$}")`,`  if [ "$TS_CLOUD_OWNER" != "${Z}" ]; then`,`    echo "[ts-cloud] REFUSING deploy: ${j} belongs to project '$TS_CLOUD_OWNER', not '${Z}'. Another project on this box derives the same site key — give one of them a distinct site name/domain, or remove ${$} to transfer ownership." >&2`,"    exit 1","  fi","else",`  mkdir -p "$(dirname "${$}")"`,`  printf '%s\\n' "${Z}" > "${$}"`,"fi"]}function VZ(j,Z){let $=N(j),z=Tj(j,Z.releaseId),Q=Sj(j),W=Math.max(1,Z.keepLogs??20),q=Z.commit||"",H=Z.branch||"";return[`mkdir -p ${$}/deploys`,`exec > >(tee -a ${z}) 2>&1`,`echo "[ts-cloud] deploy ${Z.releaseId} commit=${q} branch=${H} starting $(date -u +%Y-%m-%dT%H:%M:%SZ)"`,"ts_cloud_record_deploy() {","  TS_CLOUD_RC=$?",'  if [ "$TS_CLOUD_RC" -eq 0 ]; then TS_CLOUD_ST=success; else TS_CLOUD_ST=failed; fi',`  printf '%s\\t%s\\t%s\\t%s\\trc=%s\\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "${Z.releaseId}" "${q}" "$TS_CLOUD_ST" "$TS_CLOUD_RC" >> ${Q}`,"}","trap ts_cloud_record_deploy EXIT",`ls -1t ${$}/deploys/*.log 2>/dev/null | tail -n +${W+1} | while read -r TS_CLOUD_OLDLOG; do rm -f "$TS_CLOUD_OLDLOG"; done`]}
-export{dj as gf,i as hf,Yj as if,f as jf,wj as kf,pj as lf,rj as mf,oj as nf,nj as of,y as pf,tj as qf,T as rf,m as sf,a as tf,Xj as uf,d as vf,$Z as wf,zZ as xf,WZ as yf,p as zf,QZ as Af,qZ as Bf,Kj as Cf,MZ as Df,Sj as Ef,xZ as Ff,GZ as Gf,HZ as Hf,YZ as If,FZ as Jf,wZ as Kf,BZ as Lf,DZ as Mf,LZ as Nf,NZ as Of,CZ as Pf,OZ as Qf,VZ as Rf};

package/dist/bin/chunk-vek8a0w6.js

@@ -1 +0,0 @@
-import{id as a,jd as b}from"./chunk-ctd2vg9w.js";import"./chunk-j703btc5.js";import"./chunk-fpm59y25.js";import"./chunk-mh0kdzqp.js";export{b as ACMDnsValidator,a as ACMClient};

package/dist/bin/chunk-vm3q5gf2.js

@@ -1,3 +0,0 @@
-import{yd as Wg}from"./chunk-4vrqm9h0.js";import{Jd as Zg,Od as $g}from"./chunk-mz0wbbsj.js";import{Rd as xg}from"./chunk-p66ptpmr.js";import{Tf as Yg}from"./chunk-axhnkn5g.js";import{Uf as Og}from"./chunk-h5pa5men.js";import{$f as s,_f as c}from"./chunk-fy8j3y8p.js";import{Og as Q,Pg as gg}from"./chunk-fpm59y25.js";import{Gh as Xg,Un as Bg}from"./chunk-rxcvf10f.js";class r{client;region;constructor(g="us-east-1",T){this.region=g,this.client=new Q(c(T))}async query(g){let T=new URLSearchParams(gg({Version:"2010-08-01",...g})).toString();return this.client.request({service:"monitoring",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:T})}async getMetricStatistics(g){let T={Action:"GetMetricStatistics",Namespace:g.Namespace,MetricName:g.MetricName,StartTime:g.StartTime.toISOString(),EndTime:g.EndTime.toISOString(),Period:g.Period};(g.Statistics??[]).forEach((P,Y)=>{T[`Statistics.member.${Y+1}`]=P}),(g.ExtendedStatistics??[]).forEach((P,Y)=>{T[`ExtendedStatistics.member.${Y+1}`]=P}),(g.Dimensions??[]).forEach((P,Y)=>{T[`Dimensions.member.${Y+1}.Name`]=P.Name,T[`Dimensions.member.${Y+1}.Value`]=P.Value});let N=await this.query(T),L=(N.GetMetricStatisticsResult||N)?.Datapoints?.member??[];if(!Array.isArray(L))L=L?[L]:[];return L.map((P)=>{let Y={},X=P.ExtendedStatistics?.entry;if(X){if(!Array.isArray(X))X=[X];for(let Z of X)if(Z?.key!=null)Y[Z.key]=Number(Z.value)}return{Timestamp:P.Timestamp,Sum:P.Sum!=null?Number(P.Sum):void 0,Average:P.Average!=null?Number(P.Average):void 0,Maximum:P.Maximum!=null?Number(P.Maximum):void 0,Minimum:P.Minimum!=null?Number(P.Minimum):void 0,Percentiles:Object.keys(Y).length?Y:void 0,Unit:P.Unit}})}async getMetricSeries(g){let T=/^p\d/.test(g.Stat);return(await this.getMetricStatistics({Namespace:g.Namespace,MetricName:g.MetricName,Dimensions:g.Dimensions,StartTime:g.StartTime,EndTime:g.EndTime,Period:g.Period,Statistics:T?[]:[g.Stat],ExtendedStatistics:T?[g.Stat]:[]})).slice().sort((z,L)=>new Date(z.Timestamp??0).getTime()-new Date(L.Timestamp??0).getTime()).map((z)=>T?z.Percentiles?.[g.Stat]??0:z[g.Stat]??0)}async describeAlarms(g){let T={Action:"DescribeAlarms"};if(g?.AlarmNamePrefix)T.AlarmNamePrefix=g.AlarmNamePrefix;if(g?.MaxRecords)T.MaxRecords=g.MaxRecords;let N=await this.query(T),L=(N.DescribeAlarmsResult||N)?.MetricAlarms?.member??[];if(!Array.isArray(L))L=L?[L]:[];return L.map((P)=>({AlarmName:P.AlarmName,StateValue:P.StateValue,MetricName:P.MetricName,ComparisonOperator:P.ComparisonOperator,Threshold:P.Threshold!=null?Number(P.Threshold):void 0,Namespace:P.Namespace}))}async putMetricAlarm(g){let T={Action:"PutMetricAlarm",AlarmName:g.AlarmName,Namespace:g.Namespace,MetricName:g.MetricName,ComparisonOperator:g.ComparisonOperator,Threshold:g.Threshold,EvaluationPeriods:g.EvaluationPeriods,Period:g.Period,Statistic:g.Statistic};if(g.AlarmDescription)T.AlarmDescription=g.AlarmDescription;(g.Dimensions??[]).forEach((N,z)=>{T[`Dimensions.member.${z+1}.Name`]=N.Name,T[`Dimensions.member.${z+1}.Value`]=N.Value}),(g.AlarmActions??[]).forEach((N,z)=>{T[`AlarmActions.member.${z+1}`]=N}),await this.query(T)}async deleteAlarms(g){if(!g.length)return;let T={Action:"DeleteAlarms"};g.forEach((N,z)=>{T[`AlarmNames.member.${z+1}`]=N}),await this.query(T)}}class a{client;region;constructor(g="us-east-1",T){this.region=g,this.client=new Q(void 0,{profile:T})}async createLogGroup(g,T){await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.CreateLogGroup","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify({logGroupName:g,...T?{tags:T}:{}})})}async putRetentionPolicy(g,T){if(![1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1096,1827,2192,2557,2922,3288,3653].includes(T))throw Error("Unsupported CloudWatch Logs retention period");await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.PutRetentionPolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify({logGroupName:g,retentionInDays:T})})}async describeLogStreams(g){let T={logGroupName:g.logGroupName};if(g.logStreamNamePrefix)T.logStreamNamePrefix=g.logStreamNamePrefix;if(g.orderBy)T.orderBy=g.orderBy;if(g.descending!==void 0)T.descending=g.descending;if(g.limit)T.limit=g.limit;return await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.DescribeLogStreams","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(T)})}async getLogEvents(g){let T={logGroupName:g.logGroupName,logStreamName:g.logStreamName};if(g.startTime)T.startTime=g.startTime;if(g.endTime)T.endTime=g.endTime;if(g.limit)T.limit=g.limit;if(g.startFromHead!==void 0)T.startFromHead=g.startFromHead;return await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.GetLogEvents","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(T)})}async describeLogGroups(g){let T={};if(g?.logGroupNamePrefix)T.logGroupNamePrefix=g.logGroupNamePrefix;if(g?.limit)T.limit=g.limit;return await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.DescribeLogGroups","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(T)})}async deleteLogGroup(g){await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.DeleteLogGroup","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify({logGroupName:g})})}async filterLogEvents(g){let T={logGroupName:g.logGroupName};if(g.logStreamNames)T.logStreamNames=g.logStreamNames;if(g.startTime)T.startTime=g.startTime;if(g.endTime)T.endTime=g.endTime;if(g.filterPattern)T.filterPattern=g.filterPattern;if(g.limit)T.limit=g.limit;return await this.client.request({service:"logs",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"Logs_20140328.FilterLogEvents","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(T)})}}import{createHash as jg}from"node:crypto";import{existsSync as Tg,mkdirSync as Vg,readdirSync as Hg,readFileSync as Ug,rmSync as Kg,writeFileSync as Eg}from"node:fs";import{homedir as Qg}from"node:os";import{join as m}from"node:path";var Ng=1,Lg=3600000,Rg=24*Lg,Fg=Lg,qg=30*Rg;function i(){let g=process.env.XDG_CACHE_HOME;return m(g&&g.trim()?g:m(Qg(),".cache"),"ts-cloud","cost-explorer")}function f(g){return m(i(),g??"__default__")}function Gg(g){let T={s:g.start,e:g.end,g:g.granularity,m:[...g.metrics].sort(),gb:[...g.groupBy].map((N)=>`${N.Type}:${N.Key}`).sort(),f:g.filter??null};return jg("sha256").update(JSON.stringify(T)).digest("hex").slice(0,24)}function Ag(g,T){let N=Date.parse(`${T}T00:00:00Z`);if(Number.isNaN(N))return!1;let z=new Date,L=Date.UTC(z.getUTCFullYear(),z.getUTCMonth(),1);return N<=L}function Sg(g){return Ag(g.start,g.end)?qg:Fg}function zg(g,T){let N=m(f(g),`${Gg(T)}.json`);if(!Tg(N))return null;let z;try{z=JSON.parse(Ug(N,"utf-8"))}catch{return null}if(z.schema!==Ng)return null;let L=Date.now()-z.savedAt;if(L<0||L>Sg(T))return null;return{response:z.response,ageSeconds:Math.floor(L/1000)}}function Jg(g,T,N){let z=f(g);Vg(z,{recursive:!0});let L={schema:Ng,savedAt:Date.now(),key:T,response:N};Eg(m(z,`${Gg(T)}.json`),JSON.stringify(L))}function wg(g){let T=g===void 0?i():f(g);if(!Tg(T))return{deletedFiles:0,scope:g??"all profiles"};let N=0;function z(L){for(let P of Hg(L,{withFileTypes:!0})){let Y=m(L,P.name);if(P.isDirectory())z(Y);else if(P.isFile()&&P.name.endsWith(".json"))N++}}return z(T),Kg(T,{recursive:!0,force:!0}),{deletedFiles:N,scope:g??"all profiles"}}function vg(g){return g===void 0?i():f(g)}class e{client;profile;useCache;lastCacheAgeSeconds=null;constructor(g,T){this.profile=g,this.useCache=T?.useCache??!0,this.client=new Q(c(g))}async getCostByService(g){return(await this.getCostByDimension({...g,dimension:"SERVICE"})).map((N)=>({service:N.key,amount:N.amount,unit:N.unit}))}async getCostByDimension(g){let{start:T,end:N,dimension:z,granularity:L="MONTHLY",filter:P}=g,Y=["UnblendedCost"],X=[{Type:"DIMENSION",Key:z}],Z={start:T,end:N,granularity:L,metrics:Y,groupBy:X,filter:P};if(this.useCache){let U=zg(this.profile,Z);if(U)return this.lastCacheAgeSeconds=U.ageSeconds,U.response}this.lastCacheAgeSeconds=null;let W=new Map,G;do{let U={TimePeriod:{Start:T,End:N},Granularity:L,Metrics:Y,GroupBy:X};if(P)U.Filter=P;if(G)U.NextPageToken=G;let S=await this.client.request({service:"ce",region:"us-east-1",method:"POST",path:"/",headers:{"content-type":"application/x-amz-json-1.1","x-amz-target":"AWSInsightsIndexService.GetCostAndUsage"},body:JSON.stringify(U)});for(let v of S?.ResultsByTime??[])for(let K of v?.Groups??[]){let C=K.Keys?.[0]??"Unknown",u=Number.parseFloat(K.Metrics?.UnblendedCost?.Amount??"0"),l=K.Metrics?.UnblendedCost?.Unit??"USD",_=W.get(C);W.set(C,{key:C,amount:(_?.amount??0)+u,unit:l})}G=S?.NextPageToken||void 0}while(G);let b=[...W.values()].filter((U)=>U.amount>0).sort((U,S)=>S.amount-U.amount);if(this.useCache)Jg(this.profile,Z,b);return b}async getDailyTotals(g){return((await this.client.request({service:"ce",region:"us-east-1",method:"POST",path:"/",headers:{"content-type":"application/x-amz-json-1.1","x-amz-target":"AWSInsightsIndexService.GetCostAndUsage"},body:JSON.stringify({TimePeriod:{Start:g.start,End:g.end},Granularity:"DAILY",Metrics:["UnblendedCost"]})}))?.ResultsByTime??[]).map((z)=>Number.parseFloat(z.Total?.UnblendedCost?.Amount??"0"))}}class p{client;region;constructor(g="us-east-1"){this.region=g,this.client=new Q}async describeFileSystems(g){let T=[];if(g?.FileSystemId)T.push(`FileSystemId=${encodeURIComponent(g.FileSystemId)}`);if(g?.CreationToken)T.push(`CreationToken=${encodeURIComponent(g.CreationToken)}`);let N=`/2015-02-01/file-systems${T.length>0?`?${T.join("&")}`:""}`;return{FileSystems:((await this.client.request({service:"elasticfilesystem",region:this.region,method:"GET",path:N,headers:{"Content-Type":"application/json"}})).FileSystems||[]).map((L)=>({FileSystemId:L.FileSystemId,Name:L.Name,CreationTime:L.CreationTime,LifeCycleState:L.LifeCycleState,NumberOfMountTargets:L.NumberOfMountTargets,SizeInBytes:L.SizeInBytes?{Value:L.SizeInBytes.Value,Timestamp:L.SizeInBytes.Timestamp}:void 0,PerformanceMode:L.PerformanceMode,Encrypted:L.Encrypted,ThroughputMode:L.ThroughputMode,Tags:L.Tags}))}}}class t{client;region;constructor(g="us-east-1"){this.region=g,this.client=new Q}async call(g,T){return this.client.request({service:"wafv2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-amz-json-1.1","X-Amz-Target":`AWSWAF_20190729.${g}`},body:JSON.stringify(T)})}async listWebACLs(g="REGIONAL"){return(await this.call("ListWebACLs",{Scope:g,Limit:100}))?.WebACLs??[]}async getWebACLRules(g,T,N="REGIONAL"){return((await this.call("GetWebACL",{Name:g,Id:T,Scope:N}))?.WebACL?.Rules??[]).map((P)=>({Name:P.Name,Priority:P.Priority,Action:P.Action?Object.keys(P.Action)[0]:P.OverrideAction?Object.keys(P.OverrideAction)[0]:"count"}))}}function Pg(g){return String(g).padStart(2,"0")}function y(g){return`${g.getUTCFullYear()}-${Pg(g.getUTCMonth()+1)}-${Pg(g.getUTCDate())}`}function _g(g){let T=Math.max(0,Math.round((Date.now()-g)/1000));if(T<60)return`${T}s ago`;let N=Math.round(T/60);if(N<60)return`${N}m ago`;let z=Math.round(N/60);if(z<48)return`${z}h ago`;return`${Math.round(z/24)}d ago`}async function k(g,T,N,z,L,P){let Y=await g.getMetricStatistics({Namespace:"AWS/Lambda",MetricName:N,Dimensions:[{Name:"FunctionName",Value:T}],StartTime:L,EndTime:P,Period:86400,Statistics:[z]}).catch(()=>[]);if(!Y.length)return 0;if(z==="Sum")return Y.reduce((X,Z)=>X+(Z.Sum??0),0);if(z==="Maximum")return Math.max(...Y.map((X)=>X.Maximum??0));return Y.reduce((X,Z)=>X+(Z.Average??0),0)/Y.length}async function w(g,T,N,z,L,P,Y){let X=await g.getMetricStatistics({Namespace:T,MetricName:N,Dimensions:z,StartTime:P,EndTime:Y,Period:86400,Statistics:[L]}).catch(()=>[]);if(!X.length)return 0;if(L==="Sum")return X.reduce((Z,W)=>Z+(W.Sum??0),0);if(L==="Maximum")return Math.max(...X.map((Z)=>Z.Maximum??0));return X.reduce((Z,W)=>Z+(W.Average??0),0)/X.length}async function n(g,T,N,z,L){let P=await g.getMetricStatistics({Namespace:"AWS/Lambda",MetricName:"Duration",Dimensions:[{Name:"FunctionName",Value:T}],StartTime:z,EndTime:L,Period:86400,ExtendedStatistics:[N]}).catch(()=>[]);return Math.round(P.reduce((Y,X)=>Y+(X.Percentiles?.[N]??0),0))}async function PT(g,T){let N=await $g(g,T),z=N.region,L=new r(z),P=new xg(z),Y=new a(z),X=new Date,Z=new Date(X.getTime()-86400000),W=g.environments?.[T]?.app,G={};G.app={name:N.slug,env:T,region:z,runtime:W?.kind==="php"?`php-${W?.phpVersion??"8.3"} (fpm)`:W?.kind??"node",url:N.endpoint??"",build:N.lastRelease?.sha?.slice(0,7)??"—",deployedAt:N.lastRelease?.timestamp??"—"},G.maintenance={enabled:!1},G.scheduler={enabled:N.scheduler!=="off",expression:N.scheduler==="sub-minute"?"rate(1 minute) · sub-minute":"rate(1 minute)",lastRun:"—"};let b=0,U=0,S=0,v=[],K=[],C=[];for(let J of N.functions){let[O,x,B,V,$,H,E,R,I]=await Promise.all([k(L,J.name,"Invocations","Sum",Z,X),k(L,J.name,"Errors","Sum",Z,X),k(L,J.name,"Throttles","Sum",Z,X),k(L,J.name,"Duration","Average",Z,X),P.getFunction(J.name).catch(()=>null),n(L,J.name,"p50",Z,X),n(L,J.name,"p95",Z,X),n(L,J.name,"p99",Z,X),L.getMetricSeries({Namespace:"AWS/Lambda",MetricName:"Invocations",Dimensions:[{Name:"FunctionName",Value:J.name}],StartTime:new Date(X.getTime()-43200000),EndTime:X,Period:3600,Stat:"Sum"}).catch(()=>[])]);b+=O,U+=x,S=Math.max(S,V);let D=$?.Configuration?.MemorySize??0,F=Object.keys($?.Configuration?.Environment?.Variables??{}),M=[],j=0;try{let{events:d=[]}=await Y.filterLogEvents({logGroupName:`/aws/lambda/${J.name}`,startTime:Z.getTime(),limit:120});for(let A of d){let h=(A.message??"").trim(),o=/Max Memory Used:\s*(\d+)\s*MB/.exec(h);if(o)j=Math.max(j,Number(o[1]));if(h&&!/^(?:START|END|REPORT|INIT_START)/.test(h))C.push({source:J.mode||J.name,timestamp:new Date(A.timestamp??0).toISOString(),when:_g(A.timestamp??0),message:h.slice(0,400),level:/error|exception|fatal|panic|traceback/i.test(h)?"error":/warn|warning|timeout|retr(?:y|ies)|throttl/i.test(h)?"warn":"info"})}M=d.filter((A)=>!/^(?:START|END|REPORT|INIT_START)/.test((A.message??"").trim())).slice(-6).map((A)=>({ts:new Date(A.timestamp??0).toISOString().slice(11,19),msg:(A.message??"").trim().slice(0,120),err:/error|exception|fatal/i.test(A.message??"")}))}catch{}let q=Math.max(1,...I);v.push({key:J.mode,name:J.name,version:J.version,memory:D,timeout:$?.Configuration?.Timeout??0,runtime:$?.Configuration?.Runtime??"provided.al2023",invocations:Math.round(O),errors:Math.round(x),p95:E||Math.round(V),status:"active",provisioned:J.provisioned?`${J.provisioned.allocated}/${J.provisioned.requested}`:void 0}),K.push({key:J.mode,name:J.name,runtime:$?.Configuration?.Runtime??"provided.al2023",arch:$?.Configuration?.Architectures?.[0]??"x86_64",memory:D,timeout:$?.Configuration?.Timeout??0,ephemeral:$?.Configuration?.EphemeralStorage?.Size??512,version:J.version,concurrency:W?.concurrency??"—",invocations:Math.round(O),errors:Math.round(x),throttles:Math.round(B),p50:H||Math.round(V),p95:E||Math.round(V),p99:R||Math.round(V),maxMem:j,spark:I.length?I.map((d)=>Math.round(d/q*100)):[0],env:F.length?F:["(none)"],recent:M.length?M:[{ts:"—",msg:"no recent events",err:!1}]})}G.functions=v,G.functionsDetail=K,G.serverlessLogs=C.sort((J,O)=>String(O.timestamp).localeCompare(String(J.timestamp))).slice(0,600),G.serverlessLogsEmptyReason=C.length?void 0:"No recent function logs were found in CloudWatch for this environment.";let u=b?Number((U/b*100).toFixed(2)):0,l=Math.round(await k(L,N.functions[0]?.name??"","ConcurrentExecutions","Maximum",Z,X));G.metrics={invocations:Math.round(b),errorRatePct:u,p95Ms:Math.round(S),coldStartPct:void 0,concurrency:l,estCostUsd:void 0};try{let J=new Wg(z),O=[],x=[],B=0;try{let{QueueUrl:$}=await J.getQueueUrl(`${N.slug}-${T}-dlq`),{Attributes:H}=await J.getQueueAttributes($);B=Number(H.ApproximateNumberOfMessages??0)}catch{}let V=W?Bg(W,N.slug,T):[];for(let $ of V){let H=$.name.replace(`${N.slug}-${T}-`,""),E=0,R=0;try{let{QueueUrl:D}=await J.getQueueUrl($.name),{Attributes:F}=await J.getQueueAttributes(D);E=Number(F.ApproximateNumberOfMessages??0),R=Number(F.ApproximateNumberOfMessagesNotVisible??0)}catch{}let I=Math.round(await w(L,"AWS/SQS","NumberOfMessagesDeleted",[{Name:"QueueName",Value:$.name}],"Sum",Z,X));O.push({name:H,visible:E,inFlight:R,processed:I,dlq:B}),x.push({name:$.name,short:H,visible:E,inFlight:R,delayed:0,processed:I,oldestSec:0,concurrency:$.concurrency??W?.queueConcurrency??"—",tries:W?.queueTries??3,visTimeout:(W?.queueTimeout??120)*6,dlq:B})}if(O.length)G.queues=O;if(x.length)G.queuesDetail=x;G.dlqItems=[]}catch{}try{let J=new Og(z),{Stacks:O}=await J.describeStacks({stackName:Xg(g,T)}),x={};for(let B of O?.[0]?.Outputs??[])if(B.OutputKey)x[B.OutputKey]=B.OutputValue??"";if(W?.database?.connection==="aurora-serverless"){let B=`${N.slug}-${T}-db`,V=[{Name:"DBClusterIdentifier",Value:B}],[$,H]=await Promise.all([w(L,"AWS/RDS","ServerlessDatabaseCapacity",V,"Average",Z,X),w(L,"AWS/RDS","DatabaseConnections",V,"Maximum",Z,X)]);if(G.aurora={id:B,engine:"aurora-mysql",minAcu:W?.database?.minCapacity??0.5,maxAcu:W?.database?.maxCapacity??4,currentAcu:$?Number($.toFixed(1)):W?.database?.minCapacity??0.5,database:"app",connections:Math.round(H),status:x.DbEndpoint?"available":"creating"},W?.rdsProxy)G.proxy={name:`${N.slug}-${T}-proxy`,endpoint:x.DbProxyEndpoint??"—",pooledConns:Math.round(H),status:"available"}}if(W?.cache?.driver==="elasticache"){let B=`${N.slug}-${T}-cache`,V=[{Name:"CacheClusterId",Value:`${B}-001`}],[$,H]=await Promise.all([w(L,"AWS/ElastiCache","CacheHits",V,"Sum",Z,X),w(L,"AWS/ElastiCache","CacheMisses",V,"Sum",Z,X)]),E=$+H>0?Number(($/($+H)*100).toFixed(1)):0;G.redis={id:B,node:"cache.t4g.micro",engine:"redis",hitRate:E,status:x.CacheEndpoint?"available":"creating"}}if(W?.efs){let B=0;try{if(x.EfsFileSystemId){let V=new p(z),{FileSystems:$}=await V.describeFileSystems({FileSystemId:x.EfsFileSystemId});B=Number((($?.[0]?.SizeInBytes?.Value??0)/1048576).toFixed(1))}}catch{}G.efs={id:x.EfsFileSystemId??"efs",mount:"/mnt/local",sizeMb:B,status:"available"}}G.assetsInfo=x.AssetsCdnDomain?{bucket:x.AssetsBucketName??`${N.slug}-${T}-assets`,cdn:x.AssetsCdnDomain,customDomain:W?.assetDomain??"—",assetUrl:N.assetUrl??"—",files:0,sizeMb:0,cacheHitPct:0,build:G.app.build}:void 0}catch{}if(G.assetsInfo)try{let O=await new s(z).list({bucket:G.assetsInfo.bucket,maxKeys:1000});G.assetsInfo.files=O.length,G.assetsInfo.sizeMb=Number((O.reduce((x,B)=>x+(B.Size??0),0)/1048576).toFixed(1)),G.assetsRecent=O.slice(0,8).map((x)=>({path:`/${x.Key}`,size:`${Math.max(1,Math.round((x.Size??0)/1024))} KB`,type:x.Key.split(".").pop()??""}))}catch{}try{if(W?.secrets){let J=Array.isArray(W.secrets)?W.secrets.map((O)=>({key:O.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g,"_"),source:O})):Object.entries(W.secrets).map(([O,x])=>({key:O,source:String(x)}));G.secretsList=J.map((O)=>({...O,updated:"—"}))}}catch{}try{let J=new s(z),O=`${N.slug}-${T}-deployments`,x=await J.getObjectJson(O,`deployments/${N.slug}/${T}/history.json`).catch(()=>null);if(x?.records?.length)G.deploymentsDetail=x.records.slice(-12).reverse().map((B)=>({sha:(B.sha??"").slice(0,7),status:B.status??"success",when:B.timestamp??"—",took:B.took??"—",by:B.by??"—",version:B.version??"—",hooks:B.hooks??[]}))}catch{}G.metricsTotals={invocations:G.metrics.invocations,errors:Math.round(U),errorRatePct:u,p95Ms:G.metrics.p95Ms,throttles:K.reduce((J,O)=>J+O.throttles,0),coldStartPct:void 0,estCostUsd:void 0,concurrency:l},G.metricsPerFn=K.map((J)=>({key:J.key,invocations:J.invocations,errors:J.errors,throttles:J.throttles,avgMs:J.p50,maxMs:J.p99,costUsd:void 0}));try{G.invSpark=await L.getMetricSeries({Namespace:"AWS/Lambda",MetricName:"Invocations",Dimensions:[{Name:"FunctionName",Value:N.functions.find((J)=>J.mode==="http")?.name??""}],StartTime:new Date(X.getTime()-86400000),EndTime:X,Period:3600,Stat:"Sum"})}catch{}try{let J=new e,O=X,x=new Date(Date.UTC(O.getUTCFullYear(),O.getUTCMonth(),1)),B=new Date(Date.UTC(O.getUTCFullYear(),O.getUTCMonth()-1,1)),[V,$]=await Promise.all([J.getCostByService({start:y(x),end:y(O),granularity:"MONTHLY"}).catch(()=>[]),J.getCostByService({start:y(B),end:y(x),granularity:"MONTHLY"}).catch(()=>[])]);if(V.length){let H=V.reduce((j,q)=>j+q.amount,0),E=$.reduce((j,q)=>j+q.amount,0),R=O.getUTCDate(),I=new Date(Date.UTC(O.getUTCFullYear(),O.getUTCMonth()+1,0)).getUTCDate();G.costSummary={monthToDateUsd:Number(H.toFixed(2)),projectedUsd:Number((H/R*I).toFixed(2)),lastMonthUsd:Number(E.toFixed(2)),dailyAvgUsd:Number((H/R).toFixed(2))},G.costServices=V.filter((j)=>j.amount>0).sort((j,q)=>q.amount-j.amount).slice(0,12).map((j)=>({name:j.service,usd:Number(j.amount.toFixed(2)),note:""})),G.metrics.estCostUsd=Number((H/R).toFixed(2)),G.metricsTotals.estCostUsd=G.metrics.estCostUsd,G.costTrend=await J.getDailyTotals({start:y(x),end:y(O)}).catch(()=>[]);let D=V.find((j)=>/lambda/i.test(j.service))?.amount??0,F=(j)=>j.invocations*(j.p50/1000)*(j.memory/1024),M=K.reduce((j,q)=>j+F(q),0)||1;G.costPerFn=K.map((j)=>({key:j.key,requests:j.invocations,gbSec:Math.round(F(j)),usd:Number((D*(F(j)/M)).toFixed(2))}))}}catch{}if(W?.firewall)try{let J=await L.getMetricStatistics({Namespace:"AWS/WAFV2",MetricName:"BlockedRequests",StartTime:Z,EndTime:X,Period:86400,Statistics:["Sum"]}).catch(()=>[]),O=await L.getMetricStatistics({Namespace:"AWS/WAFV2",MetricName:"AllowedRequests",StartTime:Z,EndTime:X,Period:86400,Statistics:["Sum"]}).catch(()=>[]);G.waf={enabled:!0,scope:"REGIONAL",acl:`${N.slug}-${T}-waf`,allowed24h:Math.round(O.reduce((x,B)=>x+(B.Sum??0),0)),blocked24h:Math.round(J.reduce((x,B)=>x+(B.Sum??0),0))};try{let x=new t(z),B=await x.listWebACLs("REGIONAL"),V=B.find(($)=>$.Name?.includes(`${N.slug}-${T}`))??B[0];if(V?.Name&&V.Id){G.waf.acl=V.Name;let $=await x.getWebACLRules(V.Name,V.Id,"REGIONAL");if($.length)G.wafRules=$.map((H)=>({name:H.Name??"—",detail:`priority ${H.Priority??0}`,action:H.Action??"count",blocked24h:0}))}}catch{}}catch{}let _=[];if(G.aurora)_.push({name:"Aurora Serverless v2",detail:`${G.aurora.id} · ${G.aurora.minAcu}-${G.aurora.maxAcu} ACU`,status:G.aurora.status});if(G.proxy)_.push({name:"RDS Proxy",detail:G.proxy.name,status:G.proxy.status});if(G.redis)_.push({name:`ElastiCache (${G.redis.engine})`,detail:`${G.redis.node} · ${G.redis.hitRate}% hit rate`,status:G.redis.status});if(G.efs)_.push({name:"EFS",detail:`${G.efs.mount} · ${G.efs.sizeMb} MB`,status:G.efs.status});if(_.length)G.dataServices=_;if(N.scheduler!=="off"&&W?.kind==="php")try{let J=await Zg(g,T,"schedule:list"),O=[];for(let x of(J||"").split(`
-`)){let B=/^\s*([\d*/,\-\s]+?)\s{2,}(.+?)(?:\s{2,}Next Due.*)?$/.exec(x);if(B&&/[*\d]/.test(B[1])&&B[1].trim().split(/\s+/).length===5)O.push({command:B[2].trim().replace(/^php artisan /,""),cron:B[1].trim(),desc:"",lastRun:"—",lastStatus:"ok"})}if(O.length)G.schedulerTasks=O}catch{}return G.topology=Yg(G,{project:g.project.name,environment:T}),G}
-export{a as sd,r as td,wg as ud,vg as vd,e as wd,PT as xd};

package/dist/bin/chunk-y7s5r8y6.js

@@ -1,3 +0,0 @@
-import{Bf as F,Ef as H,Ff as w,Of as A,gf as $,pf as Z}from"./chunk-tga3hhwk.js";function C(z){return`'${z.split("'").join("'\\''")}'`}function q(z){let G=z.user||"root",K=z.script.join(`
-`),M=G==="root"?'bash -l "$TS_CLOUD_RECIPE"':`runuser -l ${C(G)} -c "bash $TS_CLOUD_RECIPE"`;return["set -uo pipefail",`echo "__TS_CLOUD_RECIPE_BEGIN__ ${z.name} (user=${G})"`,"TS_CLOUD_RECIPE=$(mktemp)",`cat > "$TS_CLOUD_RECIPE" <<'TS_CLOUD_RECIPE_EOF'`,K,"TS_CLOUD_RECIPE_EOF",'chmod +r "$TS_CLOUD_RECIPE"',M,"TS_CLOUD_RC=$?",'rm -f "$TS_CLOUD_RECIPE"',`echo "__TS_CLOUD_RECIPE_END__ ${z.name} exit=$TS_CLOUD_RC"`,"exit $TS_CLOUD_RC"]}var j={info:()=>{},warn:()=>{},error:()=>{},step:()=>{},success:()=>{}};async function X(z){return await z.driver.findComputeTargets({slug:z.slug,environment:z.environment,role:z.role||"app"})}async function B(z,G){let K=z.logger||j,M=await X(z);if(M.length===0)return{success:!1,error:`No '${z.role||"app"}' servers found for ${z.slug}/${z.environment}.`};let Q=$(z.slug,G.siteName),W=w(Q,G.to||"unused"),U=["set -uo pipefail",...A(W,{...G.to?{to:G.to}:{},unitBase:`${z.slug}-${G.siteName}`}),`(cd ${Z} && pantry restart php-fpm) 2>/dev/null || true`,`(cd ${W.current} && eval "$(cd ${Z} && pantry env 2>/dev/null)" && php artisan queue:restart) 2>/dev/null || true`];K.step(`Rolling back ${G.siteName}${G.to?` to ${G.to}`:" to the previous release"} on ${M.length} server(s)...`);let V=await z.driver.runRemoteDeploy({targets:M,commands:U,comment:`ts-cloud rollback ${z.slug}/${G.siteName}`,tags:{Project:z.slug,Environment:z.environment,Role:z.role||"app"}});if(!V.success)K.error(`Rollback failed: ${V.error||"unknown error"}`);else K.success(`Rolled back ${G.siteName}.`);return{success:V.success,error:V.error,perInstance:V.perInstance}}async function I(z,G){let K=await X(z);if(K.length===0)return{success:!1,error:`No '${z.role||"app"}' servers found for ${z.slug}/${z.environment}.`};let M=H($(z.slug,G.siteName)),Q=Math.max(1,G.limit??20),W=[`[ -f ${M} ] && tail -n ${Q} ${M} || echo "no deploy history for ${G.siteName}"`],U=await z.driver.runRemoteDeploy({targets:K,commands:W,comment:`ts-cloud deploy:history ${z.slug}/${G.siteName}`,tags:{Project:z.slug,Environment:z.environment,Role:z.role||"app"}});return{success:U.success,error:U.error,perInstance:U.perInstance}}async function L(z,G){let K=z.logger||j,M=await X(z);if(M.length===0)return{success:!1,error:`No '${z.role||"app"}' servers found for ${z.slug}/${z.environment}.`};K.step(`Running recipe '${G.name}' as ${G.user||"root"} on ${M.length} server(s)...`);let Q=await z.driver.runRemoteDeploy({targets:M,commands:q({name:G.name,script:G.script,user:G.user}),comment:`ts-cloud recipe ${G.name}`,tags:{Project:z.slug,Environment:z.environment,Role:z.role||"app"}});if(!Q.success)K.error(`Recipe '${G.name}' failed: ${Q.error||"unknown error"}`);else K.success(`Recipe '${G.name}' completed.`);return{success:Q.success,error:Q.error,perInstance:Q.perInstance}}async function S(z,G){let K=z.logger||j;if(!G.database?.name)return{success:!1,error:"No appDatabase configured to restore."};let M=await X(z);if(M.length===0)return{success:!1,error:`No '${z.role||"app"}' servers found for ${z.slug}/${z.environment}.`};K.step(`Restoring database '${G.database.name}'${G.from?` from ${G.from}`:" from the latest backup"} on ${M.length} server(s)...`);let Q=await z.driver.runRemoteDeploy({targets:M,commands:F(G.database,{from:G.from}),comment:`ts-cloud db:restore ${z.slug}/${G.database.name}`,tags:{Project:z.slug,Environment:z.environment,Role:z.role||"app"}});if(!Q.success)K.error(`Restore failed: ${Q.error||"unknown error"}`);else K.success(`Restored ${G.database.name}.`);return{success:Q.success,error:Q.error,perInstance:Q.perInstance}}
-export{B as od,I as pd,L as qd,S as rd};

package/dist/bin/chunk-yv9sth30.js

@@ -1 +0,0 @@
-import{dd as a}from"./chunk-fhc6ntvd.js";import"./chunk-fpm59y25.js";import"./chunk-mh0kdzqp.js";export{a as RDSClient};