@podosoft/podokit 1.0.2 → 1.1.2

package/dist/deploy.js

@@ -491,6 +491,154 @@ function helmFailureFlag(runner) {
     const version = checked(runner, "helm", ["version", "--short"]).trim();
     return version.startsWith("v4.") ? "--rollback-on-failure" : "--atomic";
 }
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function managedStorageImage(resource, profile) {
+    const name = `${profile.target.release}-minio`;
+    if (!isRecord(resource) ||
+        resource.apiVersion !== "apps/v1" ||
+        resource.kind !== "StatefulSet" ||
+        !isRecord(resource.metadata) ||
+        resource.metadata.name !== name ||
+        resource.metadata.namespace !== profile.target.namespace ||
+        !isRecord(resource.spec) ||
+        !isRecord(resource.spec.template) ||
+        !isRecord(resource.spec.template.spec) ||
+        !Array.isArray(resource.spec.template.spec.containers)) {
+        return null;
+    }
+    const containers = resource.spec.template.spec.containers;
+    const container = containers[0];
+    if (containers.length !== 1 ||
+        !isRecord(container) ||
+        container.name !== "minio" ||
+        typeof container.image !== "string" ||
+        !container.image.trim()) {
+        return null;
+    }
+    return container.image;
+}
+function jsonObjectStream(output) {
+    const documents = [];
+    let start = -1;
+    let depth = 0;
+    let quoted = false;
+    let escaped = false;
+    for (let index = 0; index < output.length; index += 1) {
+        const character = output[index];
+        if (start < 0) {
+            if (/\s/.test(character ?? ""))
+                continue;
+            if (character !== "{")
+                return null;
+            start = index;
+        }
+        if (quoted) {
+            if (escaped)
+                escaped = false;
+            else if (character === "\\")
+                escaped = true;
+            else if (character === '"')
+                quoted = false;
+            continue;
+        }
+        if (character === '"')
+            quoted = true;
+        else if (character === "{")
+            depth += 1;
+        else if (character === "}")
+            depth -= 1;
+        if (depth === 0) {
+            try {
+                documents.push(JSON.parse(output.slice(start, index + 1)));
+            }
+            catch {
+                return null;
+            }
+            start = -1;
+        }
+    }
+    return start < 0 && documents.length > 0 ? documents : null;
+}
+function recordedStorageImage(profile, runner) {
+    const manifest = runner("helm", helmArgs(profile, ["get", "manifest", `${profile.target.release}-dependencies`]), { capture: true });
+    if (manifest.status !== 0 || !manifest.stdout.trim())
+        return null;
+    const temporaryRoot = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "podokit-storage-manifest-"));
+    try {
+        const path = (0, node_path_1.join)(temporaryRoot, "dependencies.yaml");
+        (0, node_fs_1.writeFileSync)(path, manifest.stdout, { mode: 0o600 });
+        // Client dry-run parses Helm's YAML without submitting a create request to Kubernetes.
+        const parsed = runner("kubectl", kubectlArgs(profile, [
+            "create", "--dry-run=client", "--validate=false", "-f", path, "-o", "json",
+        ]), { capture: true });
+        if (parsed.status !== 0)
+            return null;
+        // kubectl prints consecutive JSON objects for a manifest containing multiple resources.
+        const documents = jsonObjectStream(parsed.stdout);
+        if (!documents)
+            return null;
+        const resources = [];
+        for (const document of documents) {
+            if (!isRecord(document))
+                return null;
+            if (document.kind !== "List")
+                resources.push(document);
+            else if (document.apiVersion === "v1" && Array.isArray(document.items)) {
+                resources.push(...document.items);
+            }
+            else
+                return null;
+        }
+        const name = `${profile.target.release}-minio`;
+        const matches = resources.filter((item) => isRecord(item) && item.kind === "StatefulSet" &&
+            isRecord(item.metadata) && item.metadata.name === name);
+        return matches.length === 1 ? managedStorageImage(matches[0], profile) : null;
+    }
+    finally {
+        (0, node_fs_1.rmSync)(temporaryRoot, { recursive: true, force: true });
+    }
+}
+function dependencyRollbackWarning(profile, plan, runner) {
+    if (profile.dependencies.objectStorage.mode !== "inCluster")
+        return null;
+    const name = `${profile.target.release}-minio`;
+    const current = runner("kubectl", kubectlArgs(profile, ["get", "statefulset", name, "--ignore-not-found=true", "-o", "json"]), { capture: true });
+    if (current.status !== 0)
+        return "the current managed storage image could not be inspected";
+    if (!current.stdout.trim()) {
+        return plan.dependencyRevision === null
+            ? null
+            : "the existing managed storage StatefulSet is missing";
+    }
+    let resource;
+    try {
+        resource = JSON.parse(current.stdout);
+    }
+    catch {
+        return "the managed storage StatefulSet has an invalid schema";
+    }
+    const currentImage = managedStorageImage(resource, profile);
+    if (!currentImage || typeof plan.images.objectStorage !== "string") {
+        return "the current managed storage image could not be confirmed";
+    }
+    if (currentImage !== plan.images.objectStorage) {
+        return "the managed storage server image is changing";
+    }
+    // A failed revision can already contain the new image while Helm's rollback target uses the old one.
+    if (plan.dependencyRevision !== null && plan.dependencyStatus !== "deployed") {
+        return "the previous dependency release is not deployed";
+    }
+    if (plan.dependencyRevision !== null) {
+        const recordedImage = recordedStorageImage(profile, runner);
+        if (!recordedImage)
+            return "the storage image recorded by Helm could not be confirmed";
+        if (recordedImage !== currentImage)
+            return "the storage image recorded by Helm differs from the current image";
+    }
+    return null;
+}
 function waitForDependencies(profile, runner) {
     const release = profile.target.release;
     const resources = [];
@@ -603,7 +751,13 @@ async function applyDeployment(projectRoot, profileName, release, confirmation,
         }
         const runtime = (0, deploy_render_1.renderDeployment)(projectRoot, profileName, profile, release, plan.images, plan.rolloutStateDigest);
         const failureFlag = helmFailureFlag(runner);
-        const common = ["--wait", "--timeout", "5m", failureFlag];
+        const common = ["--wait", "--timeout", "5m"];
+        const rollbackWarning = dependencyRollbackWarning(profile, plan, runner);
+        if (rollbackWarning) {
+            console.warn(`Disable automatic dependency rollback because ${rollbackWarning}. ` +
+                "If the upgrade fails, stop storage and restore the complete data and IAM backup before starting the previous image. " +
+                "Application upgrades retain automatic rollback.");
+        }
         if (profile.dependencies.objectStorage.mode === "inCluster") {
             checked(runner, "kubectl", kubectlArgs(profile, [
                 "delete",
@@ -620,6 +774,7 @@ async function applyDeployment(projectRoot, profileName, release, confirmation,
             `${profile.target.release}-dependencies`,
             runtime.dependencyChart,
             ...common,
+            ...(rollbackWarning ? [] : [failureFlag]),
         ]), false);
         waitForDependencies(profile, runner);
         const job = migrationJobName(profile, release);
@@ -632,6 +787,7 @@ async function applyDeployment(projectRoot, profileName, release, confirmation,
             profile.target.release,
             runtime.applicationChart,
             ...common,
+            failureFlag,
         ]), false);
         for (const kind of [
             "api",

package/dist/index.d.ts

@@ -8,6 +8,7 @@ interface ParsedArgs {
     dir?: string;
     pm?: string;
     runtime?: string;
+    database?: string;
     from?: string;
     apply: boolean;
     adopt: boolean;

package/dist/index.js

@@ -22,11 +22,14 @@ const deploy_compose_profile_1 = require("./deploy-compose-profile");
 const deploy_compose_render_1 = require("./deploy-compose-render");
 const deploy_compose_1 = require("./deploy-compose");
 const deploy_compose_sync_1 = require("./deploy-compose-sync");
+const provider_1 = require("./provider");
 const HELP = `podo — PodoKit project generator
 
 Usage:
   podo create <name> [options]
   podo add <module> [--adopt]
+  podo provider list        Show active runtime providers
+  podo provider set <capability> <provider> [--apply]
   podo remove <module>     Un-apply a module (inverse of add)
   podo status              Show version, modules, file tiers, and local edits
   podo diff                List PodoKit-managed files you have edited
@@ -42,6 +45,7 @@ Options:
   --template <t> Template to scaffold (see below)
   --dir <path>   Target directory (default: ./<name>)
   --runtime bun  Optional explicit Bun runtime selection
+  --database <provider>     Database provider: postgres | sqlite
   --name <label> Display name for a locale
   --direction <direction>  Text direction: ltr | rtl (default: ltr)
   --profile <name>         Deployment profile name
@@ -143,6 +147,9 @@ function parseArgs(argv) {
         else if (arg === "--runtime") {
             parsed.runtime = argv[++i];
         }
+        else if (arg === "--database") {
+            parsed.database = argv[++i];
+        }
         else if (arg === "--name") {
             parsed.localeName = argv[++i];
         }
@@ -335,6 +342,39 @@ async function main(argv) {
         return;
     }
     const modulesDir = (0, node_path_1.join)(__dirname, "templates", "modules");
+    if (args.command === "provider") {
+        const action = args.positionals[1] ?? "list";
+        try {
+            if (action === "list") {
+                const providers = (0, provider_1.listProviders)(process.cwd());
+                process.stdout.write(providers.map((item) => `${item.capability.padEnd(14)} ${item.selected.padEnd(10)} (${item.available.join(", ")})`).join("\n") + "\n");
+                return;
+            }
+            if (action === "set") {
+                const capability = args.positionals[2];
+                const provider = args.positionals[3];
+                if (!capability || !provider) {
+                    fail("Usage: podo provider set <capability> <provider> [--apply]");
+                }
+                const plan = args.apply
+                    ? (0, provider_1.applyProviderChange)(process.cwd(), capability, provider, { modulesDir })
+                    : (0, provider_1.planProviderChange)(process.cwd(), capability, provider, modulesDir);
+                process.stdout.write(`${plan.capability}: ${plan.from} -> ${plan.to}${plan.changed ? "" : " (unchanged)"}\n` +
+                    plan.modulesToAdd.map((module) => `  ${args.apply ? "add" : "would add"} module ${module}`).join("\n") +
+                    (plan.modulesToAdd.length ? "\n" : "") +
+                    plan.files.map((file) => `  ${args.apply ? "write" : "would write"} ${file}`).join("\n") +
+                    (plan.files.length ? "\n" : "") +
+                    plan.warnings.map((warning) => `warning: ${warning}`).join("\n") +
+                    (plan.warnings.length ? "\n" : "") +
+                    (args.apply ? "Applied provider configuration.\n" : "Dry-run — nothing was written. Re-run with --apply to write.\n"));
+                return;
+            }
+            fail(`Unknown provider command "${action}". Use list or set.`);
+        }
+        catch (err) {
+            fail(err.message);
+        }
+    }
     if (args.command === "add") {
         const moduleName = args.name;
         if (!moduleName) {
@@ -695,6 +735,7 @@ async function main(argv) {
             targetDir: args.dir,
             runtime: resolved.toolchain.runtime,
             ai: args.ai,
+            database: args.database === undefined ? undefined : args.database,
         });
         const relPath = (0, node_path_1.relative)(process.cwd(), result.projectDir) || ".";
         const rel = relPath.startsWith("..") ? result.projectDir : relPath;

package/dist/lib.d.ts

@@ -1,5 +1,7 @@
 export { create } from "./create";
 export type { CreateOptions, CreateResult } from "./create";
+export { applyProviderChange, listProviders, planProviderChange, providerSource, PROVIDERS_SOURCE, } from "./provider";
+export type { ProviderChangePlan, ProviderListItem } from "./provider";
 export { TEMPLATES, DEFAULT_TEMPLATE, TEMPLATE_NAMES, isKnownTemplate } from "./templates";
 export type { TemplateInfo } from "./templates";
 export { listModules, addModule } from "./add";

package/dist/lib.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyComposeDeployment = exports.rollbackComposeDeployment = exports.planComposeRollback = exports.planComposeDeployment = exports.inspectComposeEndpointFingerprint = exports.getComposeStatus = exports.doctorComposeDeployment = exports.applyComposeDeployment = exports.renderComposeDeployment = exports.parseComposeProfile = exports.initializeComposeProfile = exports.readDeploymentDriver = exports.loadKubernetesProfile = exports.loadComposeProfile = exports.loadAnyDeploymentProfile = exports.listAnyDeploymentProfiles = exports.assertAnyReleaseTag = exports.DEPLOY_DRIVERS = exports.renderDeployment = exports.loadDeploymentProfile = exports.listDeploymentProfiles = exports.initializeDeploymentProfile = exports.deploymentProfileDigest = exports.assertReleaseTag = exports.verifyDeployment = exports.rollbackDeployment = exports.planRollback = exports.planDeployment = exports.inspectClusterFingerprint = exports.getDeploymentStatus = exports.doctorDeployment = exports.applyDeployment = exports.runDevCommand = exports.resolveDevRuntime = exports.renderRuntimeCompose = exports.renderRoute = exports.readDevConfig = exports.summarize = exports.planUpdate = exports.SUPPORTED_FRAMEWORKS = exports.doctor = exports.diff = exports.status = exports.addModule = exports.listModules = exports.isKnownTemplate = exports.TEMPLATE_NAMES = exports.DEFAULT_TEMPLATE = exports.TEMPLATES = exports.create = void 0;
-exports.verifyAnyDeployment = exports.planAnyDeployment = exports.getAnyDeploymentStatus = exports.doctorAnyDeployment = exports.describeDeploymentTarget = void 0;
+exports.getComposeStatus = exports.doctorComposeDeployment = exports.applyComposeDeployment = exports.renderComposeDeployment = exports.parseComposeProfile = exports.initializeComposeProfile = exports.readDeploymentDriver = exports.loadKubernetesProfile = exports.loadComposeProfile = exports.loadAnyDeploymentProfile = exports.listAnyDeploymentProfiles = exports.assertAnyReleaseTag = exports.DEPLOY_DRIVERS = exports.renderDeployment = exports.loadDeploymentProfile = exports.listDeploymentProfiles = exports.initializeDeploymentProfile = exports.deploymentProfileDigest = exports.assertReleaseTag = exports.verifyDeployment = exports.rollbackDeployment = exports.planRollback = exports.planDeployment = exports.inspectClusterFingerprint = exports.getDeploymentStatus = exports.doctorDeployment = exports.applyDeployment = exports.runDevCommand = exports.resolveDevRuntime = exports.renderRuntimeCompose = exports.renderRoute = exports.readDevConfig = exports.summarize = exports.planUpdate = exports.SUPPORTED_FRAMEWORKS = exports.doctor = exports.diff = exports.status = exports.addModule = exports.listModules = exports.isKnownTemplate = exports.TEMPLATE_NAMES = exports.DEFAULT_TEMPLATE = exports.TEMPLATES = exports.PROVIDERS_SOURCE = exports.providerSource = exports.planProviderChange = exports.listProviders = exports.applyProviderChange = exports.create = void 0;
+exports.verifyAnyDeployment = exports.planAnyDeployment = exports.getAnyDeploymentStatus = exports.doctorAnyDeployment = exports.describeDeploymentTarget = exports.verifyComposeDeployment = exports.rollbackComposeDeployment = exports.planComposeRollback = exports.planComposeDeployment = exports.inspectComposeEndpointFingerprint = void 0;
 exports.builtinTemplatesDir = builtinTemplatesDir;
 exports.builtinModulesDir = builtinModulesDir;
 // Library entry point: the reusable functions behind the `podo` CLI, for other
@@ -9,6 +9,12 @@ exports.builtinModulesDir = builtinModulesDir;
 const node_path_1 = require("node:path");
 var create_1 = require("./create");
 Object.defineProperty(exports, "create", { enumerable: true, get: function () { return create_1.create; } });
+var provider_1 = require("./provider");
+Object.defineProperty(exports, "applyProviderChange", { enumerable: true, get: function () { return provider_1.applyProviderChange; } });
+Object.defineProperty(exports, "listProviders", { enumerable: true, get: function () { return provider_1.listProviders; } });
+Object.defineProperty(exports, "planProviderChange", { enumerable: true, get: function () { return provider_1.planProviderChange; } });
+Object.defineProperty(exports, "providerSource", { enumerable: true, get: function () { return provider_1.providerSource; } });
+Object.defineProperty(exports, "PROVIDERS_SOURCE", { enumerable: true, get: function () { return provider_1.PROVIDERS_SOURCE; } });
 var templates_1 = require("./templates");
 Object.defineProperty(exports, "TEMPLATES", { enumerable: true, get: function () { return templates_1.TEMPLATES; } });
 Object.defineProperty(exports, "DEFAULT_TEMPLATE", { enumerable: true, get: function () { return templates_1.DEFAULT_TEMPLATE; } });

package/dist/lockfile.d.ts

@@ -1,11 +1,12 @@
 import type { TemplateVars } from "@podosoft/podokit-template-engine";
+import { type ProviderSelections } from "@podosoft/podokit-runtime";
 import { type Toolchain } from "./toolchain";
 /**
  * The generation lockfile (`.podokit/`) records how a project was assembled so
  * `podo update` can rebuild the same inputs and detect user edits. See
  * ADR-0009 (update mechanism) and ADR-0010 (ownership model).
  */
-export declare const LOCK_SCHEMA_VERSION = 3;
+export declare const LOCK_SCHEMA_VERSION = 4;
 /** File ownership tier. See ADR-0010. */
 export type Tier = "managed" | "assembled" | "owned";
 export interface ManifestModule {
@@ -35,6 +36,8 @@ export interface PodokitManifest {
     toolchain: Toolchain;
     /** Render vars / prompt answers, replayed on update (copier-style). */
     answers: Record<string, string>;
+    /** Active implementation for each provider-neutral runtime capability. */
+    providers: ProviderSelections;
     modules: ManifestModule[];
     /** Globs whose files are user-owned and never touched by update. */
     ownedGlobs: string[];
@@ -68,6 +71,7 @@ export declare function readManifest(projectRoot: string): PodokitManifest | nul
 export declare function writeManifest(projectRoot: string, manifest: PodokitManifest): void;
 /** Complete replay variables for a Bun-only v1 project. */
 export declare function manifestTemplateVars(manifest: PodokitManifest): TemplateVars;
+export declare function providerTemplateVars(providers: ProviderSelections): TemplateVars;
 export declare function writeFilesLock(projectRoot: string, lock: FilesLock): void;
 /** Read the PodoKit CLI's own version to stamp into the manifest. */
 export declare function podokitVersion(): string;
@@ -98,6 +102,7 @@ export interface InitLockOptions {
     answers: Record<string, string>;
     version?: string;
     ownedGlobs?: string[];
+    providers?: Partial<Record<keyof ProviderSelections, string>>;
 }
 /** Write the initial `.podokit/` lockfile for a freshly created project. */
 export declare function initLockfile(projectRoot: string, options: InitLockOptions): void;

package/dist/lockfile.js

@@ -6,6 +6,7 @@ exports.filesLockPath = filesLockPath;
 exports.readManifest = readManifest;
 exports.writeManifest = writeManifest;
 exports.manifestTemplateVars = manifestTemplateVars;
+exports.providerTemplateVars = providerTemplateVars;
 exports.writeFilesLock = writeFilesLock;
 exports.podokitVersion = podokitVersion;
 exports.matchGlob = matchGlob;
@@ -20,13 +21,14 @@ exports.recordModules = recordModules;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const podokit_template_engine_1 = require("@podosoft/podokit-template-engine");
+const podokit_runtime_1 = require("@podosoft/podokit-runtime");
 const toolchain_1 = require("./toolchain");
 /**
  * The generation lockfile (`.podokit/`) records how a project was assembled so
  * `podo update` can rebuild the same inputs and detect user edits. See
  * ADR-0009 (update mechanism) and ADR-0010 (ownership model).
  */
-exports.LOCK_SCHEMA_VERSION = 3;
+exports.LOCK_SCHEMA_VERSION = 4;
 const PODOKIT_DIR = ".podokit";
 const MANIFEST_FILE = "manifest.json";
 const FILES_LOCK_FILE = "files.lock";
@@ -87,12 +89,13 @@ function readManifest(projectRoot) {
     if (!(0, node_fs_1.existsSync)(file))
         return null;
     const raw = JSON.parse((0, node_fs_1.readFileSync)(file, "utf8"));
-    if (raw.schemaVersion !== exports.LOCK_SCHEMA_VERSION
+    if ((raw.schemaVersion !== 3 && raw.schemaVersion !== exports.LOCK_SCHEMA_VERSION)
         || raw.toolchain?.runtime !== "bun"
         || raw.toolchain.packageManager !== "bun") {
         throw new Error("This project was generated by PodoKit v0 and is not compatible with PodoKit v1 updates. Use @podosoft/podokit@0.17.4 for this project; create a new v1 project for Bun and Elysia.");
     }
-    return raw;
+    const providers = (0, podokit_runtime_1.resolveProviderSelections)(raw.providers);
+    return { ...raw, schemaVersion: exports.LOCK_SCHEMA_VERSION, providers };
 }
 function writeManifest(projectRoot, manifest) {
     (0, node_fs_1.mkdirSync)(podokitDir(projectRoot), { recursive: true });
@@ -100,7 +103,20 @@ function writeManifest(projectRoot, manifest) {
 }
 /** Complete replay variables for a Bun-only v1 project. */
 function manifestTemplateVars(manifest) {
-    return { ...manifest.answers, ...(0, toolchain_1.toolchainTemplateVars)(manifest.toolchain) };
+    return {
+        ...manifest.answers,
+        ...providerTemplateVars(manifest.providers),
+        ...(0, toolchain_1.toolchainTemplateVars)(manifest.toolchain),
+    };
+}
+function providerTemplateVars(providers) {
+    return {
+        databaseProvider: providers.database,
+        cacheProvider: providers.cache,
+        objectStorageProvider: providers["object-storage"],
+        eventsProvider: providers.events,
+        jobsProvider: providers.jobs,
+    };
 }
 function writeFilesLock(projectRoot, lock) {
     (0, node_fs_1.mkdirSync)(podokitDir(projectRoot), { recursive: true });
@@ -206,12 +222,14 @@ function computeDrift(projectRoot) {
 /** Write the initial `.podokit/` lockfile for a freshly created project. */
 function initLockfile(projectRoot, options) {
     const ownedGlobs = options.ownedGlobs ?? exports.DEFAULT_OWNED_GLOBS;
+    const providers = (0, podokit_runtime_1.resolveProviderSelections)(options.providers ?? podokit_runtime_1.SERVER_PROVIDER_SELECTIONS);
     const manifest = {
         schemaVersion: exports.LOCK_SCHEMA_VERSION,
         podokitVersion: options.version ?? podokitVersion(),
         template: options.template,
         toolchain: options.toolchain ?? (0, toolchain_1.resolveToolchain)(),
         answers: options.answers,
+        providers,
         modules: [],
         ownedGlobs,
         managedOverrides: [],

package/dist/provider.d.ts

@@ -0,0 +1,24 @@
+import { type ProviderCapability, type ProviderSelections } from "@podosoft/podokit-runtime";
+export declare const PROVIDERS_SOURCE = "apps/api/src/config/providers.ts";
+export interface ProviderListItem {
+    capability: ProviderCapability;
+    selected: string;
+    available: readonly string[];
+}
+export interface ProviderChangePlan {
+    capability: ProviderCapability;
+    from: string;
+    to: string;
+    changed: boolean;
+    files: string[];
+    modulesToAdd: string[];
+    warnings: string[];
+}
+export interface ApplyProviderChangeOptions {
+    modulesDir?: string;
+    podokitVersion?: string;
+}
+export declare function providerSource(providers: ProviderSelections): string;
+export declare function listProviders(projectRoot: string): ProviderListItem[];
+export declare function planProviderChange(projectRoot: string, capabilityInput: string, provider: string, modulesDir?: string): ProviderChangePlan;
+export declare function applyProviderChange(projectRoot: string, capabilityInput: string, provider: string, options?: ApplyProviderChangeOptions): ProviderChangePlan;

package/dist/provider.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROVIDERS_SOURCE = void 0;
+exports.providerSource = providerSource;
+exports.listProviders = listProviders;
+exports.planProviderChange = planProviderChange;
+exports.applyProviderChange = applyProviderChange;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const podokit_runtime_1 = require("@podosoft/podokit-runtime");
+const add_1 = require("./add");
+const lockfile_1 = require("./lockfile");
+exports.PROVIDERS_SOURCE = "apps/api/src/config/providers.ts";
+function requireManifest(projectRoot) {
+    const manifest = (0, lockfile_1.readManifest)(projectRoot);
+    if (!manifest) {
+        throw new Error("This does not look like a PodoKit project: .podokit/manifest.json not found.");
+    }
+    return manifest;
+}
+function assertProvider(capability, provider) {
+    if (!(0, podokit_runtime_1.isProviderCapability)(capability)) {
+        throw new Error(`Unknown provider capability "${capability}". Use one of: ${podokit_runtime_1.PROVIDER_CAPABILITIES.join(", ")}.`);
+    }
+    if (!(0, podokit_runtime_1.isProviderName)(capability, provider)) {
+        throw new Error(`Unknown ${capability} provider "${provider}". Use one of: ${podokit_runtime_1.PROVIDER_NAMES[capability].join(", ")}.`);
+    }
+    return capability;
+}
+function providerSource(providers) {
+    return `import type { ProviderSelections } from "@podosoft/podokit-runtime";\n\n` +
+        `export const PROVIDERS = {\n` +
+        `  database: "${providers.database}",\n` +
+        `  cache: "${providers.cache}",\n` +
+        `  "object-storage": "${providers["object-storage"]}",\n` +
+        `  events: "${providers.events}",\n` +
+        `  jobs: "${providers.jobs}",\n` +
+        `} as const satisfies ProviderSelections;\n`;
+}
+function listProviders(projectRoot) {
+    const manifest = requireManifest(projectRoot);
+    return podokit_runtime_1.PROVIDER_CAPABILITIES.map((capability) => ({
+        capability,
+        selected: manifest.providers[capability],
+        available: podokit_runtime_1.PROVIDER_NAMES[capability],
+    }));
+}
+function planProviderChange(projectRoot, capabilityInput, provider, modulesDir) {
+    const capability = assertProvider(capabilityInput, provider);
+    const manifest = requireManifest(projectRoot);
+    const from = manifest.providers[capability];
+    const changed = from !== provider;
+    const sourcePath = (0, node_path_1.join)(projectRoot, exports.PROVIDERS_SOURCE);
+    const files = changed || !(0, node_fs_1.existsSync)(sourcePath)
+        ? [exports.PROVIDERS_SOURCE, ".podokit/manifest.json", ".podokit/files.lock"]
+        : [];
+    const implementation = modulesDir
+        ? providerImplementationModule(projectRoot, modulesDir, capability, provider)
+        : undefined;
+    const modulesToAdd = implementation
+        && !manifest.modules.some((module) => module.name === implementation)
+        ? [implementation]
+        : [];
+    return {
+        capability,
+        from,
+        to: provider,
+        changed,
+        files,
+        modulesToAdd,
+        warnings: [
+            ...(changed ? [
+                "Provider switching changes configuration and code only.",
+                "Existing data and objects are not migrated or deleted.",
+            ] : []),
+            ...(modulesToAdd.length
+                ? [`Provider implementation module ${modulesToAdd[0]} will be added.`]
+                : []),
+        ],
+    };
+}
+function providerImplementationModule(projectRoot, modulesDir, capability, provider) {
+    for (const available of (0, add_1.listModules)(modulesDir, projectRoot)) {
+        const resolved = (0, add_1.resolveModule)(available.name, modulesDir, projectRoot);
+        if (!resolved)
+            continue;
+        if ((0, add_1.readModuleManifest)(resolved.dir).provides?.[capability] === provider) {
+            return available.name;
+        }
+    }
+    if (capability === "database")
+        return undefined;
+    throw new Error(`No module provides the ${capability} provider "${provider}".`);
+}
+function applyProviderChange(projectRoot, capabilityInput, provider, options = {}) {
+    const plan = planProviderChange(projectRoot, capabilityInput, provider, options.modulesDir);
+    if (!plan.changed && plan.files.length === 0 && plan.modulesToAdd.length === 0)
+        return plan;
+    const drift = (0, lockfile_1.computeDrift)(projectRoot);
+    if (drift.drifted.includes(exports.PROVIDERS_SOURCE) || drift.missing.includes(exports.PROVIDERS_SOURCE)) {
+        throw new Error(`${exports.PROVIDERS_SOURCE} has local edits. Resolve them or run podo eject before changing providers.`);
+    }
+    for (const module of plan.modulesToAdd) {
+        if (!options.modulesDir)
+            throw new Error("A modules directory is required to add provider implementations.");
+        (0, add_1.addModule)({
+            projectRoot,
+            module,
+            modulesDir: options.modulesDir,
+            podokitVersion: options.podokitVersion,
+        });
+    }
+    const manifest = requireManifest(projectRoot);
+    const sourcePath = (0, node_path_1.join)(projectRoot, exports.PROVIDERS_SOURCE);
+    const manifestFile = (0, lockfile_1.manifestPath)(projectRoot);
+    const lockFile = (0, lockfile_1.filesLockPath)(projectRoot);
+    const snapshots = new Map([
+        [sourcePath, (0, node_fs_1.existsSync)(sourcePath) ? (0, node_fs_1.readFileSync)(sourcePath, "utf8") : null],
+        [manifestFile, (0, node_fs_1.readFileSync)(manifestFile, "utf8")],
+        [lockFile, (0, node_fs_1.existsSync)(lockFile) ? (0, node_fs_1.readFileSync)(lockFile, "utf8") : null],
+    ]);
+    const temporary = `${sourcePath}.podokit-provider-${process.pid}`;
+    try {
+        manifest.providers[plan.capability] = plan.to;
+        manifest.answers = { ...manifest.answers, ...(0, lockfile_1.providerTemplateVars)(manifest.providers) };
+        (0, node_fs_1.writeFileSync)(temporary, providerSource(manifest.providers), { mode: 0o600 });
+        (0, node_fs_1.renameSync)(temporary, sourcePath);
+        (0, lockfile_1.writeManifest)(projectRoot, manifest);
+        (0, lockfile_1.writeFilesLock)(projectRoot, (0, lockfile_1.computeFilesLock)(projectRoot, manifest.ownedGlobs, manifest.managedOverrides ?? []));
+    }
+    catch (error) {
+        (0, node_fs_1.rmSync)(temporary, { force: true });
+        for (const [path, content] of snapshots) {
+            if (content === null)
+                (0, node_fs_1.rmSync)(path, { force: true });
+            else
+                (0, node_fs_1.writeFileSync)(path, content);
+        }
+        throw error;
+    }
+    return plan;
+}

package/dist/remove.js

@@ -6,7 +6,6 @@ const node_path_1 = require("node:path");
 const podokit_template_engine_1 = require("@podosoft/podokit-template-engine");
 const add_1 = require("./add");
 const lockfile_1 = require("./lockfile");
-const toolchain_1 = require("./toolchain");
 function readModuleManifest(moduleDir, vars) {
     const source = (0, node_fs_1.readFileSync)((0, node_path_1.join)(moduleDir, "module.manifest.json"), "utf8");
     return JSON.parse(vars ? (0, podokit_template_engine_1.renderTokens)(source, vars) : source);
@@ -51,7 +50,7 @@ function removeModule(options) {
     }
     const vars = {
         projectName: projectName(projectRoot),
-        ...(0, toolchain_1.toolchainTemplateVars)(manifest.toolchain),
+        ...(0, lockfile_1.manifestTemplateVars)(manifest),
     };
     const targetManifest = readModuleManifest(moduleDir, vars);
     // Resolve the manifests of the OTHER installed modules once — used for the
@@ -64,7 +63,11 @@ function removeModule(options) {
     })
         .filter((m) => m !== null);
     // Guard: refuse if another installed module requires this one.
-    const dependents = others.filter((o) => (o.manifest.requires ?? []).includes(module)).map((o) => o.name);
+    const selectedCapabilities = Object.entries(targetManifest.provides ?? {})
+        .filter(([capability, provider]) => manifest.providers[capability] === provider)
+        .map(([capability]) => capability);
+    const dependents = others.filter((other) => (other.manifest.requires ?? []).includes(module)
+        || (other.manifest.requiresCapabilities ?? []).some((capability) => selectedCapabilities.includes(capability))).map((other) => other.name);
     if (dependents.length) {
         throw new Error(`Cannot remove "${module}": required by ${dependents.join(", ")}. Remove ${dependents.length > 1 ? "those" : "that"} first.`);
     }

package/dist/templates/fullstack/AGENTS.md

@@ -8,9 +8,9 @@ Follow it so your changes match the project's conventions.
 
 A Bun 1.4 full-stack TypeScript monorepo ({{packageManager}} workspaces):
 
-- `apps/api` — **Elysia** backend (`{{projectName}}-api`), Bun.SQL + PostgreSQL, merged OpenAPI at `/api-docs`.
+- `apps/api` — **Elysia** backend (`{{projectName}}-api`), Bun.SQL + `{{databaseProvider}}`, merged OpenAPI at `/api-docs`.
 - `apps/web` — **SvelteKit** frontend (`{{projectName}}-web`), Tailwind v4 + shadcn-svelte + typesafe-i18n.
-- `infra/` — Docker Compose (PostgreSQL/Redis) and example k3s manifests.
+- `infra/` — provider-aware Docker Compose and example k3s manifests.
 - `.podokit/` — PodoKit generation metadata plus application-owned development and
   deployment profiles (see "PodoKit tooling" below).
 
@@ -19,7 +19,7 @@ A Bun 1.4 full-stack TypeScript monorepo ({{packageManager}} workspaces):
 ```bash
 {{packageManager}} install
 cp .env.example .env
-docker compose -f infra/docker/docker-compose.yml up -d   # PostgreSQL (+ Redis)
+docker compose -f infra/docker/docker-compose.yml up -d   # selected external providers only
 {{rootRun}} dev        # api on http://localhost:5002, web on http://localhost:5001
 ```
 
@@ -74,9 +74,10 @@ Useful commands:
   exact API WebSocket allowlist; never use a prefix or wildcard for that allowlist.
 - `podo add <module>` — add a feature (auth, admin-dashboard, redis, bullmq, …). It wires itself into the app; run `podo add` with no argument to list modules.
 - `podo remove <module>` — un-apply a module (inverse of add; refuses if another module needs it, keeps files you edited).
+- `podo provider list` / `podo provider set <capability> <provider> [--apply]` — inspect or switch database, cache, object storage, events, and jobs. Set is dry-run by default and never migrates or deletes provider data. Local providers require one API process.
 - `podo status` / `podo diff` — see your local edits vs. what PodoKit generated.
 - `podo update` — pull in template/module improvements (3-way merges your edits; never touches owned files).
-- `podo deploy` — plan, apply, verify, or roll back an immutable release on Kubernetes or one Docker host. Tag `vX.Y.Z` to build and push the images (`.github/workflows/release.yml`; check its runner — GitHub-hosted minutes are free for public repositories only). Use `.agents/skills/podokit-deploy`.
+- `podo deploy` — plan, apply, verify, or roll back an immutable release on Kubernetes or one Docker host. Production API WebSocket paths belong in the deployment profile's exact `exposure.webSocketPaths` allowlist; Compose trusts forwarding headers only from `exposure.trustedProxyCidrs`. Tag `vX.Y.Z` to build and push the images (`.github/workflows/release.yml`; check its runner — GitHub-hosted minutes are free for public repositories only). Use `.agents/skills/podokit-deploy`.
 - `podo deploy sync` — copy local build output into a running Compose deployment and restart it, for iterating without a release. Not a release: no image is published and the next `apply` discards it. Use `.agents/skills/podokit-deploy-fast`.
 
 ## Commit conventions