alchemy 0.41.1 → 0.41.2

package/lib/build-date.d.ts

@@ -2,5 +2,5 @@
  * The build date used as the default worker compatibility date.
  * This is set to the date when the package was built.
  */
-export declare const BUILD_DATE = "2025-06-26";
+export declare const BUILD_DATE = "2025-06-27";
 //# sourceMappingURL=build-date.d.ts.map

package/lib/build-date.js

@@ -4,5 +4,5 @@
  * The build date used as the default worker compatibility date.
  * This is set to the date when the package was built.
  */
-export const BUILD_DATE = "2025-06-26";
+export const BUILD_DATE = "2025-06-27";
 //# sourceMappingURL=build-date.js.map

package/lib/cloudflare/certificate-pack.d.ts

@@ -0,0 +1,216 @@
+import type { Context } from "../context.ts";
+import { Resource } from "../resource.ts";
+import { type CloudflareApi, type CloudflareApiOptions } from "./api.ts";
+import type { Zone } from "./zone.ts";
+/**
+ * Certificate Authority options for Advanced Certificate Packs
+ */
+export type CertificateAuthority = "google" | "lets_encrypt" | "ssl_com";
+/**
+ * Validation method for certificate verification
+ */
+export type ValidationMethod = "txt" | "http" | "email";
+/**
+ * Validity period options for certificates
+ */
+export type ValidityDays = 14 | 30 | 90 | 365;
+/**
+ * Certificate pack status values during lifecycle
+ */
+export type CertificatePackStatus = "initializing" | "pending_validation" | "deleted" | "pending_issuance" | "pending_deployment" | "pending_deletion" | "pending_expiration" | "expired" | "active" | "initializing_timed_out" | "validation_timed_out" | "issuance_timed_out" | "deployment_timed_out" | "deletion_timed_out" | "pending_cleanup" | "staging_deployment" | "staging_active" | "deactivating" | "inactive" | "backup_issued" | "holding_deployment";
+/**
+ * Properties for creating a Certificate Pack
+ */
+export interface CertificatePackProps extends CloudflareApiOptions {
+    /**
+     * The zone to create the certificate pack for
+     * Can be a Zone resource, zone ID string, or omitted to auto-infer from hosts
+     */
+    zone?: string | Zone;
+    /**
+     * Certificate Authority to use for issuing the certificate
+     * - google: Google Trust Services (Enterprise features)
+     * - lets_encrypt: Let's Encrypt (Free, shorter validity periods)
+     * - ssl_com: SSL.com (Commercial certificates with extended validation)
+     *
+     * **Note:** This property is immutable after creation. To change the CA,
+     * you must delete and recreate the certificate pack.
+     */
+    certificateAuthority: CertificateAuthority;
+    /**
+     * List of hostnames to include in the certificate
+     * Maximum 50 hosts, must include the zone apex (root domain)
+     * Supports wildcards (e.g., "*.example.com")
+     *
+     * **Note:** This property is immutable after creation.
+     */
+    hosts: string[];
+    /**
+     * Certificate type - only "advanced" is supported
+     *
+     * **Note:** This property is immutable after creation.
+     * @default "advanced"
+     */
+    type?: "advanced";
+    /**
+     * Method used to validate domain ownership
+     * - txt: DNS TXT record validation
+     * - http: HTTP file validation
+     * - email: Email validation
+     *
+     * **Note:** This property is immutable after creation.
+     */
+    validationMethod: ValidationMethod;
+    /**
+     * Certificate validity period in days
+     * Available options: 14, 30, 90, or 365 days
+     *
+     * **Note:** This property is immutable after creation.
+     */
+    validityDays: ValidityDays;
+    /**
+     * Whether to add Cloudflare branding subdomain as Common Name
+     * Adds sni.cloudflaressl.com subdomain when enabled
+     *
+     * **Note:** This is the only property that can be updated after creation.
+     * @default false
+     */
+    cloudflareBranding?: boolean;
+    /**
+     * Whether to delete the certificate pack
+     * If set to false, the pack will remain but the resource will be removed from state
+     *
+     * @default true
+     */
+    delete?: boolean;
+}
+/**
+ * Output returned after Certificate Pack creation/update
+ */
+export interface CertificatePack extends Resource<"cloudflare::CertificatePack"> {
+    /**
+     * The unique ID of the certificate pack
+     */
+    id: string;
+    /**
+     * Certificate Authority used for the certificate
+     */
+    certificateAuthority: CertificateAuthority;
+    /**
+     * Whether Cloudflare branding is enabled
+     */
+    cloudflareBranding: boolean;
+    /**
+     * List of hostnames included in the certificate
+     */
+    hosts: string[];
+    /**
+     * Current status of the certificate pack
+     */
+    status: CertificatePackStatus;
+    /**
+     * Certificate type
+     */
+    type: "advanced";
+    /**
+     * Validation method used for domain verification
+     */
+    validationMethod: ValidationMethod;
+    /**
+     * Certificate validity period in days
+     */
+    validityDays: ValidityDays;
+    /**
+     * Zone ID the certificate pack belongs to
+     */
+    zoneId: string;
+    /**
+     * Zone name (domain)
+     */
+    zoneName: string;
+}
+/**
+ * Creates and manages Cloudflare Advanced Certificate Packs.
+ *
+ * Advanced Certificate Packs provide flexible SSL/TLS certificates with
+ * multiple Certificate Authority options, custom validity periods, and
+ * support for up to 50 hostnames per certificate.
+ *
+ * **Important Notes:**
+ * - Requires a paid Cloudflare plan (not available on Free plans)
+ * - Certificate provisioning can take up to 10 minutes
+ * - Most properties are immutable after creation (only cloudflareBranding can be updated)
+ * - To change immutable properties, you must delete and recreate the certificate pack
+ *
+ * @example
+ * // Create a basic certificate pack with Let's Encrypt
+ * const basicCert = await CertificatePack("my-cert", {
+ *   zone: myZone,
+ *   certificateAuthority: "lets_encrypt",
+ *   hosts: ["example.com", "www.example.com"],
+ *   validationMethod: "txt",
+ *   validityDays: 90
+ * });
+ *
+ * @example
+ * // Create an enterprise certificate with Google Trust Services
+ * const enterpriseCert = await CertificatePack("enterprise-cert", {
+ *   zone: "example.com",
+ *   certificateAuthority: "google",
+ *   hosts: ["example.com", "*.example.com", "api.example.com"],
+ *   validationMethod: "txt",
+ *   validityDays: 365,
+ *   cloudflareBranding: true
+ * });
+ *
+ * @example
+ * // Create a wildcard certificate with SSL.com
+ * const wildcardCert = await CertificatePack("wildcard-cert", {
+ *   zone: myZone,
+ *   certificateAuthority: "ssl_com",
+ *   hosts: ["example.com", "*.example.com"],
+ *   validationMethod: "email",
+ *   validityDays: 365
+ * });
+ *
+ * @example
+ * // Create a certificate for multiple subdomains
+ * const multiDomainCert = await CertificatePack("multi-cert", {
+ *   zone: "example.com",
+ *   certificateAuthority: "lets_encrypt",
+ *   hosts: [
+ *     "example.com",
+ *     "www.example.com",
+ *     "api.example.com",
+ *     "admin.example.com",
+ *     "blog.example.com"
+ *   ],
+ *   validationMethod: "http",
+ *   validityDays: 90
+ * });
+ *
+ * @see https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/
+ */
+export declare const CertificatePack: (((this: any, id: string, props?: {}) => never) & (new (_: never) => never)) | ((this: Context<CertificatePack>, _id: string, props: CertificatePackProps) => Promise<CertificatePack>);
+/**
+ * Helper function to wait for certificate pack to reach active status
+ * Useful for testing or when you need to ensure the certificate is ready
+ *
+ * @param api CloudflareApi instance
+ * @param zoneId Zone ID
+ * @param certificatePackId Certificate pack ID
+ * @param timeoutMs Maximum time to wait in milliseconds (default: 15 minutes)
+ * @returns Promise resolving to the final certificate pack status
+ *
+ * @example
+ * // Wait for certificate to become active
+ * const finalStatus = await waitForCertificatePackActive(
+ *   api,
+ *   zoneId,
+ *   certificatePack.id,
+ *   10 * 60 * 1000 // 10 minutes
+ * );
+ * console.log(`Certificate pack is now: ${finalStatus}`);
+ */
+export declare function waitForCertificatePackActive(api: CloudflareApi, zoneId: string, certificatePackId: string, timeoutMs?: number): Promise<CertificatePackStatus>;
+//# sourceMappingURL=certificate-pack.d.ts.map

package/lib/cloudflare/certificate-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-pack.d.ts","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,SAAS,GACT,QAAQ,GACR,wBAAwB,GACxB,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,UAAU,GACV,eAAe,GACf,oBAAoB,CAAC;AAEzB;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;;;;;;OAQG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;;;;;;OAOG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;;;;OAKG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eACf,SAAQ,QAAQ,CAAC,6BAA6B,CAAC;IAC/C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,MAAM,EAAE,qBAAqB,CAAC;IAE9B;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;OAEG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,eAAO,MAAM,eAAe,yFAGlB,OAAO,CAAC,eAAe,CAAC,OACzB,MAAM,SACJ,oBAAoB,KAC1B,OAAO,CAAC,eAAe,CAAC,CAoQ5B,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAuChC"}

package/lib/cloudflare/certificate-pack.js

@@ -0,0 +1,350 @@
+import { Resource } from "../resource.js";
+import { logger } from "../util/logger.js";
+import { handleApiError } from "./api-error.js";
+import { createCloudflareApi, } from "./api.js";
+/**
+ * Creates and manages Cloudflare Advanced Certificate Packs.
+ *
+ * Advanced Certificate Packs provide flexible SSL/TLS certificates with
+ * multiple Certificate Authority options, custom validity periods, and
+ * support for up to 50 hostnames per certificate.
+ *
+ * **Important Notes:**
+ * - Requires a paid Cloudflare plan (not available on Free plans)
+ * - Certificate provisioning can take up to 10 minutes
+ * - Most properties are immutable after creation (only cloudflareBranding can be updated)
+ * - To change immutable properties, you must delete and recreate the certificate pack
+ *
+ * @example
+ * // Create a basic certificate pack with Let's Encrypt
+ * const basicCert = await CertificatePack("my-cert", {
+ *   zone: myZone,
+ *   certificateAuthority: "lets_encrypt",
+ *   hosts: ["example.com", "www.example.com"],
+ *   validationMethod: "txt",
+ *   validityDays: 90
+ * });
+ *
+ * @example
+ * // Create an enterprise certificate with Google Trust Services
+ * const enterpriseCert = await CertificatePack("enterprise-cert", {
+ *   zone: "example.com",
+ *   certificateAuthority: "google",
+ *   hosts: ["example.com", "*.example.com", "api.example.com"],
+ *   validationMethod: "txt",
+ *   validityDays: 365,
+ *   cloudflareBranding: true
+ * });
+ *
+ * @example
+ * // Create a wildcard certificate with SSL.com
+ * const wildcardCert = await CertificatePack("wildcard-cert", {
+ *   zone: myZone,
+ *   certificateAuthority: "ssl_com",
+ *   hosts: ["example.com", "*.example.com"],
+ *   validationMethod: "email",
+ *   validityDays: 365
+ * });
+ *
+ * @example
+ * // Create a certificate for multiple subdomains
+ * const multiDomainCert = await CertificatePack("multi-cert", {
+ *   zone: "example.com",
+ *   certificateAuthority: "lets_encrypt",
+ *   hosts: [
+ *     "example.com",
+ *     "www.example.com",
+ *     "api.example.com",
+ *     "admin.example.com",
+ *     "blog.example.com"
+ *   ],
+ *   validationMethod: "http",
+ *   validityDays: 90
+ * });
+ *
+ * @see https://developers.cloudflare.com/api/resources/ssl/subresources/certificate_packs/
+ */
+export const CertificatePack = Resource("cloudflare::CertificatePack", async function (_id, props) {
+    // Create Cloudflare API client with automatic account discovery
+    const api = await createCloudflareApi(props);
+    // Resolve zone ID and zone name
+    let zoneId;
+    let zoneName;
+    if (props.zone) {
+        // Zone provided - use it
+        if (typeof props.zone === "string") {
+            zoneId = props.zone;
+            // Try to get zone name from API for better error messages
+            try {
+                const zoneResponse = await api.get(`/zones/${zoneId}`);
+                if (zoneResponse.ok) {
+                    const zoneData = (await zoneResponse.json());
+                    zoneName = zoneData.result.name;
+                }
+                else {
+                    zoneName = zoneId; // Fallback to ID
+                }
+            }
+            catch {
+                zoneName = zoneId; // Fallback to ID
+            }
+        }
+        else {
+            zoneId = props.zone.id;
+            zoneName = props.zone.name || props.zone.id;
+        }
+    }
+    else {
+        // Auto-infer zone from the first host
+        if (props.hosts.length === 0) {
+            throw new Error("At least one host must be specified when zone is not provided");
+        }
+        logger.log(`Auto-inferring zone from hostname: ${props.hosts[0]}`);
+        const zoneInfo = await findZoneForHostname(api, props.hosts[0]);
+        zoneId = zoneInfo.zoneId;
+        zoneName = zoneInfo.zoneName;
+        logger.log(`Auto-inferred zone: ${zoneName} (${zoneId})`);
+    }
+    if (this.phase === "delete") {
+        if (this.output?.id && props.delete !== false) {
+            const deleteResponse = await api.delete(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`);
+            if (!deleteResponse.ok && deleteResponse.status !== 404) {
+                await handleApiError(deleteResponse, "delete", "certificate pack", this.output.id);
+            }
+        }
+        else {
+            logger.warn("Certificate pack not found, skipping delete");
+        }
+        return this.destroy();
+    }
+    if (this.phase === "update" && this.output?.id) {
+        // Validate immutable properties
+        const currentPack = this.output;
+        if (props.certificateAuthority !== currentPack.certificateAuthority) {
+            throw new Error(`Cannot change certificateAuthority from '${currentPack.certificateAuthority}' to '${props.certificateAuthority}'. Certificate Authority is immutable after creation. You must delete and recreate the certificate pack.`);
+        }
+        if (JSON.stringify(props.hosts.sort()) !==
+            JSON.stringify(currentPack.hosts.sort())) {
+            throw new Error(`Cannot change hosts from [${currentPack.hosts.join(", ")}] to [${props.hosts.join(", ")}]. Hosts are immutable after creation. You must delete and recreate the certificate pack.`);
+        }
+        if (props.validationMethod !== currentPack.validationMethod) {
+            throw new Error(`Cannot change validationMethod from '${currentPack.validationMethod}' to '${props.validationMethod}'. Validation method is immutable after creation. You must delete and recreate the certificate pack.`);
+        }
+        if (props.validityDays !== currentPack.validityDays) {
+            throw new Error(`Cannot change validityDays from ${currentPack.validityDays} to ${props.validityDays}. Validity period is immutable after creation. You must delete and recreate the certificate pack.`);
+        }
+        const type = props.type || "advanced";
+        if (type !== currentPack.type) {
+            throw new Error(`Cannot change type from '${currentPack.type}' to '${type}'. Type is immutable after creation. You must delete and recreate the certificate pack.`);
+        }
+        // Only cloudflareBranding can be updated
+        if (props.cloudflareBranding !== currentPack.cloudflareBranding) {
+            logger.log(`Updating certificate pack cloudflare branding from ${currentPack.cloudflareBranding} to ${props.cloudflareBranding}`);
+            const updateResponse = await api.patch(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`, {
+                cloudflare_branding: props.cloudflareBranding || false,
+            });
+            if (!updateResponse.ok) {
+                await handleApiError(updateResponse, "update", "certificate pack", this.output.id);
+            }
+        }
+        // Get updated certificate pack details
+        const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`);
+        if (!response.ok) {
+            await handleApiError(response, "get", "certificate pack", this.output.id);
+        }
+        const updatedPack = (await response.json()).result;
+        return this({
+            id: updatedPack.id,
+            certificateAuthority: updatedPack.certificate_authority,
+            cloudflareBranding: updatedPack.cloudflare_branding,
+            hosts: updatedPack.hosts,
+            status: updatedPack.status,
+            type: updatedPack.type,
+            validationMethod: updatedPack.validation_method,
+            validityDays: updatedPack.validity_days,
+            zoneId: updatedPack.zone_id,
+            zoneName: zoneName,
+        });
+    }
+    // Create new certificate pack
+    if (props.hosts.length === 0) {
+        throw new Error("At least one host must be specified");
+    }
+    if (props.hosts.length > 50) {
+        throw new Error("Maximum 50 hosts are allowed per certificate pack");
+    }
+    // Validate that zone apex is included
+    const hasZoneApex = props.hosts.some((host) => host === zoneName || (zoneName && host === zoneName));
+    if (!hasZoneApex && zoneName) {
+        logger.warn(`Zone apex '${zoneName}' is not included in hosts. This may cause certificate validation issues.`);
+    }
+    // Check for existing certificate pack that matches our configuration
+    const existingPack = await findMatchingCertificatePack(api, zoneId, props);
+    if (existingPack) {
+        // Adopt the existing certificate pack
+        logger.log(`Adopting existing certificate pack ${existingPack.id} instead of creating a new one`);
+        return this({
+            id: existingPack.id,
+            certificateAuthority: existingPack.certificate_authority,
+            cloudflareBranding: existingPack.cloudflare_branding,
+            hosts: existingPack.hosts,
+            status: existingPack.status,
+            type: existingPack.type,
+            validationMethod: existingPack.validation_method,
+            validityDays: existingPack.validity_days,
+            zoneId: existingPack.zone_id,
+            zoneName: zoneName,
+        });
+    }
+    logger.log(`Creating certificate pack with ${props.hosts.length} hosts using ${props.certificateAuthority}`);
+    const createResponse = await api.post(`/zones/${zoneId}/ssl/certificate_packs/order`, {
+        certificate_authority: props.certificateAuthority,
+        cloudflare_branding: props.cloudflareBranding || false,
+        hosts: props.hosts,
+        type: props.type || "advanced",
+        validation_method: props.validationMethod,
+        validity_days: props.validityDays,
+    });
+    if (!createResponse.ok) {
+        const errorText = await createResponse.text();
+        // Provide helpful error messages for common issues
+        if (errorText.includes("subscription")) {
+            throw new Error(`Failed to create certificate pack: Advanced Certificate Packs require a paid Cloudflare plan. Please upgrade your subscription to use this feature.\n\nOriginal error: ${errorText}`);
+        }
+        if (errorText.includes("quota")) {
+            throw new Error(`Failed to create certificate pack: Certificate pack quota exceeded. Please check your account limits.\n\nOriginal error: ${errorText}`);
+        }
+        // Throw generic error for other cases
+        throw new Error(`Failed to create certificate pack: ${createResponse.statusText}\n\n${errorText}`);
+    }
+    const createdPack = (await createResponse.json()).result;
+    logger.log(`Certificate pack created with ID ${createdPack.id}. Status: ${createdPack.status}. Note: Certificate provisioning can take up to 10 minutes.`);
+    return this({
+        id: createdPack.id,
+        certificateAuthority: createdPack.certificate_authority,
+        cloudflareBranding: createdPack.cloudflare_branding,
+        hosts: createdPack.hosts,
+        status: createdPack.status,
+        type: createdPack.type,
+        validationMethod: createdPack.validation_method,
+        validityDays: createdPack.validity_days,
+        zoneId: createdPack.zone_id,
+        zoneName: zoneName,
+    });
+});
+/**
+ * Helper function to wait for certificate pack to reach active status
+ * Useful for testing or when you need to ensure the certificate is ready
+ *
+ * @param api CloudflareApi instance
+ * @param zoneId Zone ID
+ * @param certificatePackId Certificate pack ID
+ * @param timeoutMs Maximum time to wait in milliseconds (default: 15 minutes)
+ * @returns Promise resolving to the final certificate pack status
+ *
+ * @example
+ * // Wait for certificate to become active
+ * const finalStatus = await waitForCertificatePackActive(
+ *   api,
+ *   zoneId,
+ *   certificatePack.id,
+ *   10 * 60 * 1000 // 10 minutes
+ * );
+ * console.log(`Certificate pack is now: ${finalStatus}`);
+ */
+export async function waitForCertificatePackActive(api, zoneId, certificatePackId, timeoutMs = 15 * 60 * 1000) {
+    const startTime = Date.now();
+    const pollInterval = 30 * 1000; // Poll every 30 seconds
+    while (Date.now() - startTime < timeoutMs) {
+        const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs/${certificatePackId}`);
+        if (!response.ok) {
+            throw new Error(`Failed to check certificate pack status: ${response.statusText}`);
+        }
+        const pack = (await response.json()).result;
+        // Return immediately if active or in a final error state
+        if (pack.status === "active") {
+            return pack.status;
+        }
+        if (pack.status.includes("timed_out") ||
+            pack.status === "expired" ||
+            pack.status === "deleted") {
+            return pack.status;
+        }
+        // Wait before next poll
+        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+    }
+    throw new Error(`Certificate pack did not become active within ${timeoutMs / 1000 / 60} minutes`);
+}
+/**
+ * Helper function to find zone ID from a hostname
+ * Searches for the zone that matches the hostname or its parent domains
+ *
+ * @param api CloudflareApi instance
+ * @param hostname The hostname to find the zone for
+ * @returns Promise resolving to the zone ID and zone name
+ */
+async function findZoneForHostname(api, hostname) {
+    // Remove wildcard prefix if present
+    const cleanHostname = hostname.replace(/^\*\./, "");
+    // Get all zones and find the best match
+    const response = await api.get("/zones");
+    if (!response.ok) {
+        throw new Error(`Failed to list zones: ${response.statusText}`);
+    }
+    const zonesData = (await response.json());
+    // Find the zone that best matches the hostname
+    // We look for the longest matching zone name (most specific)
+    let bestMatch = null;
+    let longestMatch = 0;
+    for (const zone of zonesData.result) {
+        if (cleanHostname === zone.name ||
+            cleanHostname.endsWith(`.${zone.name}`)) {
+            if (zone.name.length > longestMatch) {
+                longestMatch = zone.name.length;
+                bestMatch = { zoneId: zone.id, zoneName: zone.name };
+            }
+        }
+    }
+    if (!bestMatch) {
+        throw new Error(`Could not find zone for hostname '${hostname}'. Available zones: ${zonesData.result.map((z) => z.name).join(", ")}`);
+    }
+    return bestMatch;
+}
+/**
+ * Helper function to find existing certificate packs that match the given configuration
+ * Used to adopt existing certificates instead of creating duplicates
+ *
+ * @param api CloudflareApi instance
+ * @param zoneId Zone ID to search in
+ * @param props Certificate pack properties to match
+ * @returns Promise resolving to matching certificate pack or null if none found
+ */
+async function findMatchingCertificatePack(api, zoneId, props) {
+    const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs`);
+    if (!response.ok) {
+        throw new Error(`Failed to list certificate packs: ${response.statusText}`);
+    }
+    const packsData = (await response.json());
+    // Find a certificate pack that matches our configuration
+    for (const pack of packsData.result) {
+        // Skip deleted or expired packs
+        if (pack.status === "deleted" || pack.status === "expired") {
+            continue;
+        }
+        // Check if the configuration matches
+        if (pack.certificate_authority === props.certificateAuthority &&
+            pack.validation_method === props.validationMethod &&
+            pack.validity_days === props.validityDays &&
+            pack.type === (props.type || "advanced")) {
+            // Check if all requested hosts are covered by this certificate pack
+            const packHosts = new Set(pack.hosts);
+            const allHostsCovered = props.hosts.every((host) => packHosts.has(host));
+            if (allHostsCovered) {
+                logger.log(`Found existing certificate pack ${pack.id} that covers all requested hosts`);
+                return pack;
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=certificate-pack.js.map

package/lib/cloudflare/certificate-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-pack.js","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AA8KlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,6BAA6B,EAC7B,KAAK,WAEH,GAAW,EACX,KAA2B;IAE3B,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,gCAAgC;IAChC,IAAI,MAAc,CAAC;IACnB,IAAI,QAAgB,CAAC;IAErB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,yBAAyB;QACzB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YACpB,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;gBACvD,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAE1C,CAAC;oBACF,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sCAAsC;QACtC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACzB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,uBAAuB,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CACrC,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC3D,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,MAAM,cAAc,CAClB,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/C,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;QAEhC,IAAI,KAAK,CAAC,oBAAoB,KAAK,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,oBAAoB,SAAS,KAAK,CAAC,oBAAoB,0GAA0G,CAC1N,CAAC;QACJ,CAAC;QAED,IACE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,6BAA6B,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2FAA2F,CACpL,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,wCAAwC,WAAW,CAAC,gBAAgB,SAAS,KAAK,CAAC,gBAAgB,sGAAsG,CAC1M,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,CAAC,YAAY,OAAO,KAAK,CAAC,YAAY,mGAAmG,CACxL,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;QACtC,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,CAAC,IAAI,SAAS,IAAI,yFAAyF,CACnJ,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,KAAK,CAAC,kBAAkB,KAAK,WAAW,CAAC,kBAAkB,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,CACR,sDAAsD,WAAW,CAAC,kBAAkB,OAAO,KAAK,CAAC,kBAAkB,EAAE,CACtH,CAAC;YAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,KAAK,CACpC,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAC1D;gBACE,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;aACvD,CACF,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,cAAc,CAClB,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC3D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAClB,QAAQ,EACR,KAAK,EACL,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CACvB,CAAC,MAAM,CAAC;QAET,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;YACvD,kBAAkB,EAAE,WAAW,CAAC,mBAAmB;YACnD,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,gBAAgB,EAAE,WAAW,CAAC,iBAAiB;YAC/C,YAAY,EAAE,WAAW,CAAC,aAAa;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO;YAC3B,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAC/D,CAAC;IAEF,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,cAAc,QAAQ,2EAA2E,CAClG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAE3E,IAAI,YAAY,EAAE,CAAC;QACjB,sCAAsC;QACtC,MAAM,CAAC,GAAG,CACR,sCAAsC,YAAY,CAAC,EAAE,gCAAgC,CACtF,CAAC;QAEF,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,oBAAoB,EAAE,YAAY,CAAC,qBAAqB;YACxD,kBAAkB,EAAE,YAAY,CAAC,mBAAmB;YACpD,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,gBAAgB,EAAE,YAAY,CAAC,iBAAiB;YAChD,YAAY,EAAE,YAAY,CAAC,aAAa;YACxC,MAAM,EAAE,YAAY,CAAC,OAAO;YAC5B,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAG,CACR,kCAAkC,KAAK,CAAC,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,oBAAoB,EAAE,CACjG,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,CACnC,UAAU,MAAM,8BAA8B,EAC9C;QACE,qBAAqB,EAAE,KAAK,CAAC,oBAAoB;QACjD,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;QACtD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;QAC9B,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;QACzC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CACF,CAAC;IAEF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QAE9C,mDAAmD;QACnD,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0KAA0K,SAAS,EAAE,CACtL,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,4HAA4H,SAAS,EAAE,CACxI,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,cAAc,CAAC,UAAU,OAAO,SAAS,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAC7B,CAAC,MAAM,CAAC;IAET,MAAM,CAAC,GAAG,CACR,oCAAoC,WAAW,CAAC,EAAE,aAAa,WAAW,CAAC,MAAM,6DAA6D,CAC/I,CAAC;IAEF,OAAO,IAAI,CAAC;QACV,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;QACvD,kBAAkB,EAAE,WAAW,CAAC,mBAAmB;QACnD,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,iBAAiB;QAC/C,YAAY,EAAE,WAAW,CAAC,aAAa;QACvC,MAAM,EAAE,WAAW,CAAC,OAAO;QAC3B,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAkB,EAClB,MAAc,EACd,iBAAyB,EACzB,YAAoB,EAAE,GAAG,EAAE,GAAG,IAAI;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,wBAAwB;IAExD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,0BAA0B,iBAAiB,EAAE,CAC9D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,CAAC,UAAU,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CACvB,CAAC,MAAM,CAAC;QAET,yDAAyD;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iDAAiD,SAAS,GAAG,IAAI,GAAG,EAAE,UAAU,CACjF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAkB,EAClB,QAAgB;IAEhB,oCAAoC;IACpC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEvC,CAAC;IAEF,+CAA+C;IAC/C,6DAA6D;IAC7D,IAAI,SAAS,GAAgD,IAAI,CAAC;IAClE,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,IACE,aAAa,KAAK,IAAI,CAAC,IAAI;YAC3B,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,EACvC,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;gBACpC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChC,SAAS,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,uBAAuB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrH,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,2BAA2B,CACxC,GAAkB,EAClB,MAAc,EACd,KAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,MAAM,wBAAwB,CAAC,CAAC;IAEzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEvC,CAAC;IAEF,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,IACE,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,oBAAoB;YACzD,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,gBAAgB;YACjD,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY;YACzC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,EACxC,CAAC;YACD,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAEzE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CACR,mCAAmC,IAAI,CAAC,EAAE,kCAAkC,CAC7E,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/lib/cloudflare/index.d.ts

@@ -13,6 +13,7 @@ export * from "./browser-rendering.ts";
 export * from "./bucket.ts";
 export * from "./bundle/external.ts";
 export * from "./bundle/local-dev-cloudflare-shim.ts";
+export * from "./certificate-pack.ts";
 export * from "./container.ts";
 export * from "./custom-domain.ts";
 export * from "./d1-clone.ts";

package/lib/cloudflare/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uCAAuC,CAAC;AACtD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uCAAuC,CAAC;AACtD,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC"}

package/lib/cloudflare/index.js

@@ -13,6 +13,7 @@ export * from "./browser-rendering.js";
 export * from "./bucket.js";
 export * from "./bundle/external.js";
 export * from "./bundle/local-dev-cloudflare-shim.js";
+export * from "./certificate-pack.js";
 export * from "./container.js";
 export * from "./custom-domain.js";
 export * from "./d1-clone.js";

package/lib/cloudflare/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uCAAuC,CAAC;AACtD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uCAAuC,CAAC;AACtD,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC"}

package/lib/cloudflare/worker.d.ts

@@ -559,7 +559,7 @@ export declare function WorkerRef<RPC extends Rpc.WorkerEntrypointBranded = Rpc.
  */
 export declare function Worker<const B extends Bindings, RPC extends Rpc.WorkerEntrypointBranded>(id: string, props: WorkerProps<B, RPC>): Promise<Worker<B, RPC>>;
 export declare function Worker<const B extends Bindings, const E extends EventSource[]>(id: string, meta: ImportMeta, props: FetchWorkerProps<B, E>): Promise<Worker<B>> & globalThis.Service;
-export declare const DEFAULT_COMPATIBILITY_DATE = "2025-06-26";
+export declare const DEFAULT_COMPATIBILITY_DATE = "2025-06-27";
 export declare const _Worker: (((this: any, id: string, props?: {}) => never) & (new (_: never) => never)) | (<const B extends Bindings>(this: Context<Worker<NoInfer<B>>>, id: string, props: WorkerProps<B>) => Promise<Worker<B>>);
 export declare function deleteWorker(api: CloudflareApi, props: {
     workerName: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alchemy",
-  "version": "0.41.1",
+  "version": "0.41.2",
   "type": "module",
   "module": "./lib/index.js",
   "license": "Apache-2.0",