@geekmidas/cli 10.0.0-alpha.117 → 10.0.0-alpha.119

package/dist/{engine-CV0krWXP.mjs → engine-tmvpAPHz.mjs}

@@ -3,19 +3,19 @@ import { a as runOutput, i as run } from "./run-BJLIerMM.mjs";
 import { t as MissingCredential } from "./credentials-B5N5yKk6.mjs";
 import { I as otlpTelemetryEnv, L as resolveStageTelemetry, ht as isReservedStageKey, u as getAppBuildOrder, v as getPublicEnvPrefix, y as stripPublicPrefix } from "./workspace-D1QbNd55.mjs";
 import { a as discriminatedUnion, c as literal, d as object, l as looseObject, n as array, p as string } from "./schemas-BCwKKA42.mjs";
-import { $ as devServicesUsed, $n as resolveHost, An as appTelemetry, B as workerDockerfileOf, C as setApplicationId, Ct as cacheBackendFor, E as setPostgresBackupId, Et as storageBackendFor, F as DockerPushFailed, Fn as usesTelemetry, Ht as toEmbeddableSecrets, K as validateImageRef, L as dockerCommand, M as stageProviderNotes, Mn as scopeTelemetryEnv, P as DockerBuildFailed, Pn as telemetryOf, Qn as isMainFrontendApp, S as recordRollback, T as setGeneratedSecret, Tt as providerOf, X as ExternalServicesNotConfigured, Z as STORAGE_KEY_PAIR, at as appEnvKeys, b as getGeneratedSecret, ct as workerEnvKeys, dt as constructGlobs, en as workerUnits, et as externalServices, g as asDokployState, h as verifyDnsRecords, kn as resourceName, m as orchestrateDns, n as reportDatabaseRuns, ot as dockerfileOf, qt as WORKER_PORT, r as reportPlannedSeeds, rn as applyPostgres, rt as stageServiceDeclarations, s as currentActor, t as DeploySeedsFailed, u as DeployJournal, v as createEmptyState, vn as withGeneratedSecrets, w as setBackupState, wt as eventsBackendFor, x as recordRelease, y as getBackupState, zt as initStageSecrets } from "./seeds-h4Wf-_hA.mjs";
+import { $ as devServicesUsed, B as workerDockerfileOf, C as setApplicationId, Ct as cacheBackendFor, E as setPostgresBackupId, Et as storageBackendFor, F as DockerPushFailed, Fn as scopeTelemetryEnv, Ht as toEmbeddableSecrets, K as validateImageRef, L as dockerCommand, Ln as telemetryOf, M as stageProviderNotes, Mn as resourceName, Nn as appTelemetry, P as DockerBuildFailed, Rn as usesTelemetry, S as recordRollback, T as setGeneratedSecret, Tt as providerOf, X as ExternalServicesNotConfigured, Z as STORAGE_KEY_PAIR, at as appEnvKeys, b as getGeneratedSecret, ct as workerEnvKeys, dt as constructGlobs, en as workerUnits, et as externalServices, g as asDokployState, h as verifyDnsRecords, in as applyPostgres, m as orchestrateDns, n as reportDatabaseRuns, nr as resolveHost, ot as dockerfileOf, qt as WORKER_PORT, r as reportPlannedSeeds, rt as stageServiceDeclarations, s as currentActor, t as DeploySeedsFailed, tr as isMainFrontendApp, u as DeployJournal, v as createEmptyState, w as setBackupState, wt as eventsBackendFor, x as recordRelease, xn as withGeneratedSecrets, y as getBackupState, zt as initStageSecrets } from "./seeds-BBnvSEgG.mjs";
 import { t as appKey } from "./derive-B4vDpzgP.mjs";
 import { a as imageRef, c as ownershipMarker, i as imageName, l as projectName, o as isOwnedBy, s as markerOf, t as applicationName } from "./identity-CBXr4wNi.mjs";
-import { f as output, i as discover, l as runWorker } from "./discover-Ca8U75dl.mjs";
+import { f as output, i as discover, l as runWorker } from "./discover-C5roJuc9.mjs";
 import { i as activeSandbox } from "./sandbox-CbVB7uOD.mjs";
 import { t as LocalSandbox } from "./local-BwC2v2Y8.mjs";
-import { D as encryptSecrets, E as eventError, g as StateVersionConflict, k as keyFingerprint, m as StateStoreBusy, o as DokployApi, s as DokployApiError, t as sniffAllApps } from "./sniffer-Dilwm65v.mjs";
+import { D as encryptSecrets, E as eventError, g as StateVersionConflict, k as keyFingerprint, m as StateStoreBusy, o as DokployApi, s as DokployApiError, t as sniffAllApps } from "./sniffer-DDUAlVqp.mjs";
 import { _ as migrationFiles, f as plannedSeeds } from "./databases-BeGP5eDh.mjs";
 import { join, relative } from "node:path";
 import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { createHash, randomBytes } from "node:crypto";
-import { cacheTable, cloudName, cookieDomain, dependentsOf, externalApiUrl, migrationTargets, mobileOrigins, provideKey, provisionOrder, schemeBase } from "@geekmidas/manifest";
+import { DEFAULT_POSTGRES_VERSION, cacheTable, cloudName, cookieDomain, dependentsOf, externalApiUrl, migrationTargets, mobileOrigins, provideKey, provisionOrder, schemeBase } from "@geekmidas/manifest";
 import { ownerRole, readerRole, roleStatements } from "@geekmidas/db/pg/roles";
 import { cacheTableStatements } from "@geekmidas/cache/postgres";
 import { Client } from "pg";
@@ -588,13 +588,17 @@ const PROVISIONERS = {
 	database: async (declaration, context) => {
 		if (declaration.kind !== "database") throw new WrongKind(declaration.kind);
 		const name = resourceName(declaration.id, declaration.kind, context.stage);
-		const { postgres } = await context.api.findOrCreatePostgres(serviceName({
+		const image = declaration.image ?? `postgres:${declaration.version ?? DEFAULT_POSTGRES_VERSION}`;
+		const extensions = declaration.extensions ?? [];
+		const { postgres, created } = await context.api.findOrCreatePostgres(serviceName({
 			stage: context.stage,
 			app: context.scope ?? context.project
 		}, declaration.id), context.projectId, context.environmentId, {
 			databaseName: name,
-			databasePassword: derivedPassword(context, `${name}:master`)
+			databasePassword: derivedPassword(context, `${name}:master`),
+			dockerImage: image
 		});
+		if (!created && declaration.image && postgres.dockerImage !== image) await context.api.updatePostgres(postgres.postgresId, { dockerImage: image });
 		const host = clusterHost(postgres);
 		context.clusters[postgres.databaseName] = postgres;
 		const schema = declaration.schema ?? "app";
@@ -605,6 +609,7 @@ const PROVISIONERS = {
 			id: declaration.id,
 			database: postgres.databaseName,
 			ownsDatabase: true,
+			extensions,
 			runtime,
 			owner,
 			...reads ? { reader: readerRole(runtime) } : {},
@@ -931,6 +936,7 @@ function statementsFor(options) {
 		...reader ? { reader } : {},
 		schema,
 		...options.ownsDatabase ? { database } : {},
+		...options.extensions?.length ? { extensions: options.extensions } : {},
 		passwords: {
 			runtime: derivedPassword(context, runtime),
 			owner: derivedPassword(context, owner),
@@ -3080,4 +3086,4 @@ const MOBILE_SKIP_REASON = "deploys via its framework toolchain";
 //#endregion
 export { RegistryNotConfigured as _, dokployResult as a, releaseDokploy as c, validateDokploy as d, verifyDokploy as f, RegistryAmbiguous as g, HealthCheckTimedOut as h, dokployApi as i, restoreImage as l, DeployMigrationsFailed as m, FrontendDeployFailed as n, planDokploy as o, verifySettings as p, MissingEnvVars as r, provisionDokploy as s, BackendDeployFailed as t, rollbackDokploy as u, RegistryNotFound as v, ProjectNotOwned as y };
 
-//# sourceMappingURL=engine-CV0krWXP.mjs.map
+//# sourceMappingURL=engine-tmvpAPHz.mjs.map