@stacksjs/ts-cloud 0.7.30 → 0.7.31

package/dist/{chunk-rr3j38qr.js → chunk-crcjdm09.js}

@@ -6,7 +6,7 @@ import {
   step,
   success,
   warn
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import {
   CloudWatchLogsClient,
   CostExplorerClient,
@@ -28,13 +28,14 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-xdd6qvre.js";
+} from "./chunk-0c69nbaa.js";
 import {
   artifactKey,
   composeServerlessAppTemplate,
   laravelServerlessEnvDefaults,
   packagePhpApp,
   packageServerlessApp,
+  resolveAppDatabase,
   resolveDeploymentMode,
   resolveQueueNames,
   resolveQueues,
@@ -42,7 +43,7 @@ import {
   resolveServerlessArtifactBucketName,
   resolveServerlessAssetBucketName,
   resolveServerlessRuntime
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 import {
   deployStaticSiteWithExternalDnsFull
 } from "./chunk-d7p84vz5.js";
@@ -347,7 +348,7 @@ async function deployServerlessApp(config, environment, opts = {}) {
   }
   if (imageMode) {
     step("Building + pushing container image");
-    const { buildAndPushServerlessImage } = await import("./chunk-4ew46pj6.js");
+    const { buildAndPushServerlessImage } = await import("./chunk-ebx9gjnn.js");
     const built = await buildAndPushServerlessImage({
       app,
       projectRoot,
@@ -10894,7 +10895,7 @@ function normalizeEngine(engine) {
 }
 function resolveDbEngine(config6) {
   const compute = config6.infrastructure?.compute;
-  const declared = config6.infrastructure?.appDatabase?.engine;
+  const declared = resolveAppDatabase(config6)?.engine;
   if (declared)
     return normalizeEngine(declared);
   const managed = compute?.managedServices ?? {};
@@ -11626,7 +11627,7 @@ function buildDashboardOperations(config6, data) {
   const backups = config6.infrastructure?.compute?.backups;
   if (backups?.enabled) {
     ops.push({ id: "backup:run", label: "Run backup now", group: "backup", target: "backup", mutates: true, confirm: "backup" });
-    if (config6.infrastructure?.appDatabase)
+    if (resolveAppDatabase(config6))
       ops.push({ id: "backup:restore", label: "Restore latest DB backup", group: "backup", target: "database", mutates: true, confirm: "restore", danger: true });
   }
   return ops;
@@ -11702,7 +11703,7 @@ async function runDashboardOperation(config6, environment, operation, options =
     return fromComputeOps(operation.id, `rollback ${operation.target}${to ? ` → ${to}` : ""}`, r);
   }
   if (operation.id === "backup:restore") {
-    const r = await restoreDatabaseBackup(ctx, { database: config6.infrastructure?.appDatabase });
+    const r = await restoreDatabaseBackup(ctx, { database: resolveAppDatabase(config6) });
     return fromComputeOps(operation.id, "db restore", r);
   }
   const targets = await driver.findComputeTargets({ slug, environment, role: "app" });

package/dist/{chunk-4ew46pj6.js → chunk-ebx9gjnn.js}

@@ -1,8 +1,8 @@
 import {
   buildAndPushServerlessImage
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import"./chunk-hsk6fe6x.js";
-import"./chunk-k56wpkhg.js";
+import"./chunk-stt1z5cx.js";
 import"./chunk-arsh1g5h.js";
 import"./chunk-v0bahtg2.js";
 export {

package/dist/{chunk-k56wpkhg.js → chunk-stt1z5cx.js}

@@ -1140,6 +1140,9 @@ function deploymentCoexistenceError(config) {
   }
   return null;
 }
+function resolveAppDatabase(config) {
+  return config.infrastructure?.appDatabase ?? config.infrastructure?.compute?.database;
+}
 function resolveCloudProvider(config) {
   if (config.cloud?.provider)
     return config.cloud.provider;
@@ -46181,4 +46184,4 @@ class ResourceManagementManager {
 }
 var resourceManagementManager = new ResourceManagementManager;
 
-export { detectServiceRegion, signRequest, signRequestAsync, createPresignedUrl, createPresignedUrlAsync, makeAWSRequest, makeAWSRequestOnce, makeAWSRequestAsync, parseXMLResponse, parseJSONResponse, clearSigningKeyCache, getSigningKeyCacheSize, isNodeCryptoAvailable, isWebCryptoAvailable, QueuePresets, RealtimePresets, detectDeploymentTargets, resolveDeploymentMode, deploymentCoexistenceError, resolveCloudProvider, TemplateBuilder, Pseudo, generateResourceName, generateLogicalId, getTimestamp, sanitizeName, resolveProjectStackName, resolveSiteStackName, resolveSiteResourceName, resolveSiteBucketName, resolveStorageBucketName, resolveDeployBucketName, resolveServerlessAppStackName, resolveServerlessArtifactBucketName, resolveServerlessAssetBucketName, DependencyGraph, analyzeStackDiff, formatDiff, Storage, Registry, CDN, DNS, Security, Compute, Network, FileSystem, Email, exports_incoming_call, Phone, Queue, JobLoader, StacksIntegration, exports_send, SMS, AI, Database, Cache, Permissions, ApiGateway, Messaging, Workflow, Monitoring, Auth, Deployment, AssetHasher, Secrets, ParameterStore, Search, Redirects, Communication, Fn2, Arn, AWS_PSEUDO_PARAMETERS, CloudFormationBuilder, buildCloudFormationTemplate, createStaticSitePreset, createNodeJsServerPreset, createNodeJsServerlessPreset, createServerlessNodePreset, createFullStackAppPreset, createApiBackendPreset, createWordPressPreset, createJamstackPreset, createMicroservicesPreset, createRealtimeAppPreset, createDataPipelinePreset, createMLApiPreset, createTraditionalWebAppPreset, createLaravelPreset, createServerlessLaravelPreset, createDashboardSite, DASHBOARD_STATE_DIR, DASHBOARD_ENTRY, DASHBOARD_PORT_BASE, DASHBOARD_PORT_SPAN, deriveManagementDashboardPort, resolveDashboardDomain, resolveDashboardDomains, hasManagementDashboardSite, MANAGEMENT_DASHBOARD_SITE_PREFIX, managementDashboardSiteName, isManagementDashboardSiteName, resolveManagementDashboardSites, resolveManagementDashboardSite, extendPreset, composePresets, createPreset, mergeInfrastructure, withMonitoring, withSecurity, withDatabase, withCache, withCDN, withQueue, fromEnvironment, fromSharedCredentials, fromEC2Metadata, fromECSMetadata, fromWebIdentity, getCredentials, createCredentialProvider, resolveCredentials, resolveRegion, getAccountId, S3Error, createS3Client, CloudError, ConfigurationError, CredentialError, DeploymentError, ValidationError, AWSAPIError, ErrorCodes, getErrorDetails, createError, DebugLogger, validateConfiguration, detectMisconfigurations, validateCredentials, checkIAMPermissions, getRequiredPermissions, suggestIAMPolicy, DEFAULT_SERVICE_LIMITS, checkServiceQuotas, getQuotaUsageSummary, suggestQuotaIncrease, FileCache, TemplateCache, templateCache, hashFile, hashString, hashBuffer, hashDirectory, hashManifest, quickHash, findChangedFiles, HashCache, parallel, batch, parallelMap, parallelWithRetry, sequence, withTimeout, RateLimiter, chunk, processInChunks, diffTemplates, getDiffSummary, requiresReplacement, categorizeChanges, getDeploymentStrategy, getDiffStats, cloud_config_schema_default, validateAgainstSchema, defaultLocalConfig, getLocalConfig, isLocalDevelopment, getLocalEndpoint, getLocalCredentials, getLocalEnvVars, MockCloudFormation, MockS3, MockDynamoDB, createMockAWS, PreviewEnvironmentManager, previewManager, generatePreviewWorkflow, generateCleanupWorkflow, generateCostReportWorkflow, PreviewNotificationService, previewNotifications, formatTable, formatTree, formatProgressBar, formatBytes, formatDuration, formatList, formatKeyValue, ProgressBar, MultiStepProgress, Spinner, TaskList, suggestCommand, formatSuggestion, isLikelyTypo, getContextualHelp, searchCommands, autocomplete, suggestFlags, formatFlagSuggestions, getCommandUsage, validateCommand, REPL, REPLContext, REPLCommandBuilder, CommandHistory, formatHistory, formatHistoryStats, MultiRegionManager, multiRegionManager, CrossRegionReferenceManager, GlobalResourceManager, RegionPairManager, StackDependencyManager, crossRegionReferenceManager, globalResourceManager, regionPairManager, stackDependencyManager, AWS_REGIONS, getRegion, getAllRegions, getRegionsByLocation, getRegionsByCompliance, getRegionsByPricingTier, isValidRegion, getClosestRegion, suggestRegions, suggestRegionPairs, formatRegion, formatRegionList, getRegionStats, MultiAccountManager, OrganizationManager, multiAccountManager, organizationManager, RECOMMENDED_ACCOUNT_STRUCTURES, RECOMMENDED_SCPS, COMMON_CROSS_ACCOUNT_ROLES, getRecommendedStructure, generateCrossAccountRoleCF, validateAccountStructure, formatAccountStructure, generateDeploymentWorkflow, generateMultiEnvWorkflow, generatePRPreviewWorkflow, generateScheduledWorkflow, generateMatrixWorkflow, generateDeploymentPipeline, generateMultiEnvPipeline, generatePreviewPipeline, generateScheduledPipeline, generateManualPipeline, generateDeploymentConfig, generateMultiEnvConfig, generateScheduledConfig, generateApprovalConfig, generateParallelConfig, BackupManager, backupManager, DisasterRecoveryManager, drManager, AWSConfigManager, awsConfigManager, CloudTrailManager, cloudTrailManager, GuardDutyManager, guardDutyManager, SecurityHubManager, securityHubManager, BlueGreenManager, blueGreenManager, CanaryManager, canaryManager, ABTestManager, abTestManager, ProgressiveDeploymentManager, progressiveDeploymentManager, XRayManager, xrayManager, MetricsManager, metricsManager, LogsManager, logsManager, SyntheticsManager, syntheticsManager, MigrationManager, migrationManager, ReplicaManager, replicaManager, PerformanceManager, performanceManager, DatabaseUserManager, databaseUserManager, SecretsRotationManager, secretsRotationManager, SecretsManager, secretsManager, CertificateManager, certificateManager, SecurityScanningManager, securityScanningManager, ImageScanningManager, imageScanningManager, BuildOptimizationManager, buildOptimizationManager, ContainerRegistryManager, containerRegistryManager, ServiceMeshManager, serviceMeshManager, LambdaLayersManager, lambdaLayersManager, LambdaVersionsManager, lambdaVersionsManager, LambdaConcurrencyManager, lambdaConcurrencyManager, LambdaDestinationsManager, lambdaDestinationsManager, LambdaVPCManager, lambdaVPCManager, LambdaDLQManager, lambdaDLQManager, Route53RoutingManager, route53RoutingManager, DNSSECManager, dnssecManager, Route53ResolverManager, route53ResolverManager, BounceComplaintHandler, bounceComplaintHandler, EmailAnalyticsManager, emailAnalyticsManager, SenderReputationManager, senderReputationManager, EmailTemplateManager, emailTemplateManager, exports_advanced, exports_inbound, exports_advanced2, exports_advanced3, FIFOQueueManager, fifoQueueManager, DLQMonitoringManager, dlqMonitoringManager, BatchProcessingManager, batchProcessingManager, QueueManagementManager, queueManagementManager, createZip, generateBootstrap, runBuildHooks, sha256, artifactKey, packageServerlessApp, MANAGED_NODE_VERSIONS, resolveServerlessRuntime, resolveQueues, resolveQueueNames, composeServerlessAppTemplate, PHP_LAYER_EXTENSIONS, phpLayerPackages, phpLayerBuildStage, generatePhpLayerDockerfile, generateAppImageDockerfile, sharedRuntimeLoop, buildNodeRuntimeLayerZip, buildBunRuntimeLayerZip, resolveApp, eventToRequest, responseToResult, createHttpHandler, createQueueHandler, createCliHandler, createHandlers, generatePhpFpmConfig, phpRuntimeLayerAssets, laravelServerlessEnvDefaults, LARAVEL_SERVERLESS_BUILD_STEPS, buildPhpRuntimeLayerZip, PHP_DEFAULT_EXCLUDES, runPhpBuildHooks, collectPhpAppEntries, packagePhpApp, StaticSiteManager, staticSiteManager, StorageAdvancedManager, storageAdvancedManager, HealthCheckManager, healthCheckManager, NetworkSecurityManager, networkSecurityManager, ResourceManagementManager, resourceManagementManager };
+export { detectServiceRegion, signRequest, signRequestAsync, createPresignedUrl, createPresignedUrlAsync, makeAWSRequest, makeAWSRequestOnce, makeAWSRequestAsync, parseXMLResponse, parseJSONResponse, clearSigningKeyCache, getSigningKeyCacheSize, isNodeCryptoAvailable, isWebCryptoAvailable, QueuePresets, RealtimePresets, detectDeploymentTargets, resolveDeploymentMode, deploymentCoexistenceError, resolveAppDatabase, resolveCloudProvider, TemplateBuilder, Pseudo, generateResourceName, generateLogicalId, getTimestamp, sanitizeName, resolveProjectStackName, resolveSiteStackName, resolveSiteResourceName, resolveSiteBucketName, resolveStorageBucketName, resolveDeployBucketName, resolveServerlessAppStackName, resolveServerlessArtifactBucketName, resolveServerlessAssetBucketName, DependencyGraph, analyzeStackDiff, formatDiff, Storage, Registry, CDN, DNS, Security, Compute, Network, FileSystem, Email, exports_incoming_call, Phone, Queue, JobLoader, StacksIntegration, exports_send, SMS, AI, Database, Cache, Permissions, ApiGateway, Messaging, Workflow, Monitoring, Auth, Deployment, AssetHasher, Secrets, ParameterStore, Search, Redirects, Communication, Fn2, Arn, AWS_PSEUDO_PARAMETERS, CloudFormationBuilder, buildCloudFormationTemplate, createStaticSitePreset, createNodeJsServerPreset, createNodeJsServerlessPreset, createServerlessNodePreset, createFullStackAppPreset, createApiBackendPreset, createWordPressPreset, createJamstackPreset, createMicroservicesPreset, createRealtimeAppPreset, createDataPipelinePreset, createMLApiPreset, createTraditionalWebAppPreset, createLaravelPreset, createServerlessLaravelPreset, createDashboardSite, DASHBOARD_STATE_DIR, DASHBOARD_ENTRY, DASHBOARD_PORT_BASE, DASHBOARD_PORT_SPAN, deriveManagementDashboardPort, resolveDashboardDomain, resolveDashboardDomains, hasManagementDashboardSite, MANAGEMENT_DASHBOARD_SITE_PREFIX, managementDashboardSiteName, isManagementDashboardSiteName, resolveManagementDashboardSites, resolveManagementDashboardSite, extendPreset, composePresets, createPreset, mergeInfrastructure, withMonitoring, withSecurity, withDatabase, withCache, withCDN, withQueue, fromEnvironment, fromSharedCredentials, fromEC2Metadata, fromECSMetadata, fromWebIdentity, getCredentials, createCredentialProvider, resolveCredentials, resolveRegion, getAccountId, S3Error, createS3Client, CloudError, ConfigurationError, CredentialError, DeploymentError, ValidationError, AWSAPIError, ErrorCodes, getErrorDetails, createError, DebugLogger, validateConfiguration, detectMisconfigurations, validateCredentials, checkIAMPermissions, getRequiredPermissions, suggestIAMPolicy, DEFAULT_SERVICE_LIMITS, checkServiceQuotas, getQuotaUsageSummary, suggestQuotaIncrease, FileCache, TemplateCache, templateCache, hashFile, hashString, hashBuffer, hashDirectory, hashManifest, quickHash, findChangedFiles, HashCache, parallel, batch, parallelMap, parallelWithRetry, sequence, withTimeout, RateLimiter, chunk, processInChunks, diffTemplates, getDiffSummary, requiresReplacement, categorizeChanges, getDeploymentStrategy, getDiffStats, cloud_config_schema_default, validateAgainstSchema, defaultLocalConfig, getLocalConfig, isLocalDevelopment, getLocalEndpoint, getLocalCredentials, getLocalEnvVars, MockCloudFormation, MockS3, MockDynamoDB, createMockAWS, PreviewEnvironmentManager, previewManager, generatePreviewWorkflow, generateCleanupWorkflow, generateCostReportWorkflow, PreviewNotificationService, previewNotifications, formatTable, formatTree, formatProgressBar, formatBytes, formatDuration, formatList, formatKeyValue, ProgressBar, MultiStepProgress, Spinner, TaskList, suggestCommand, formatSuggestion, isLikelyTypo, getContextualHelp, searchCommands, autocomplete, suggestFlags, formatFlagSuggestions, getCommandUsage, validateCommand, REPL, REPLContext, REPLCommandBuilder, CommandHistory, formatHistory, formatHistoryStats, MultiRegionManager, multiRegionManager, CrossRegionReferenceManager, GlobalResourceManager, RegionPairManager, StackDependencyManager, crossRegionReferenceManager, globalResourceManager, regionPairManager, stackDependencyManager, AWS_REGIONS, getRegion, getAllRegions, getRegionsByLocation, getRegionsByCompliance, getRegionsByPricingTier, isValidRegion, getClosestRegion, suggestRegions, suggestRegionPairs, formatRegion, formatRegionList, getRegionStats, MultiAccountManager, OrganizationManager, multiAccountManager, organizationManager, RECOMMENDED_ACCOUNT_STRUCTURES, RECOMMENDED_SCPS, COMMON_CROSS_ACCOUNT_ROLES, getRecommendedStructure, generateCrossAccountRoleCF, validateAccountStructure, formatAccountStructure, generateDeploymentWorkflow, generateMultiEnvWorkflow, generatePRPreviewWorkflow, generateScheduledWorkflow, generateMatrixWorkflow, generateDeploymentPipeline, generateMultiEnvPipeline, generatePreviewPipeline, generateScheduledPipeline, generateManualPipeline, generateDeploymentConfig, generateMultiEnvConfig, generateScheduledConfig, generateApprovalConfig, generateParallelConfig, BackupManager, backupManager, DisasterRecoveryManager, drManager, AWSConfigManager, awsConfigManager, CloudTrailManager, cloudTrailManager, GuardDutyManager, guardDutyManager, SecurityHubManager, securityHubManager, BlueGreenManager, blueGreenManager, CanaryManager, canaryManager, ABTestManager, abTestManager, ProgressiveDeploymentManager, progressiveDeploymentManager, XRayManager, xrayManager, MetricsManager, metricsManager, LogsManager, logsManager, SyntheticsManager, syntheticsManager, MigrationManager, migrationManager, ReplicaManager, replicaManager, PerformanceManager, performanceManager, DatabaseUserManager, databaseUserManager, SecretsRotationManager, secretsRotationManager, SecretsManager, secretsManager, CertificateManager, certificateManager, SecurityScanningManager, securityScanningManager, ImageScanningManager, imageScanningManager, BuildOptimizationManager, buildOptimizationManager, ContainerRegistryManager, containerRegistryManager, ServiceMeshManager, serviceMeshManager, LambdaLayersManager, lambdaLayersManager, LambdaVersionsManager, lambdaVersionsManager, LambdaConcurrencyManager, lambdaConcurrencyManager, LambdaDestinationsManager, lambdaDestinationsManager, LambdaVPCManager, lambdaVPCManager, LambdaDLQManager, lambdaDLQManager, Route53RoutingManager, route53RoutingManager, DNSSECManager, dnssecManager, Route53ResolverManager, route53ResolverManager, BounceComplaintHandler, bounceComplaintHandler, EmailAnalyticsManager, emailAnalyticsManager, SenderReputationManager, senderReputationManager, EmailTemplateManager, emailTemplateManager, exports_advanced, exports_inbound, exports_advanced2, exports_advanced3, FIFOQueueManager, fifoQueueManager, DLQMonitoringManager, dlqMonitoringManager, BatchProcessingManager, batchProcessingManager, QueueManagementManager, queueManagementManager, createZip, generateBootstrap, runBuildHooks, sha256, artifactKey, packageServerlessApp, MANAGED_NODE_VERSIONS, resolveServerlessRuntime, resolveQueues, resolveQueueNames, composeServerlessAppTemplate, PHP_LAYER_EXTENSIONS, phpLayerPackages, phpLayerBuildStage, generatePhpLayerDockerfile, generateAppImageDockerfile, sharedRuntimeLoop, buildNodeRuntimeLayerZip, buildBunRuntimeLayerZip, resolveApp, eventToRequest, responseToResult, createHttpHandler, createQueueHandler, createCliHandler, createHandlers, generatePhpFpmConfig, phpRuntimeLayerAssets, laravelServerlessEnvDefaults, LARAVEL_SERVERLESS_BUILD_STEPS, buildPhpRuntimeLayerZip, PHP_DEFAULT_EXCLUDES, runPhpBuildHooks, collectPhpAppEntries, packagePhpApp, StaticSiteManager, staticSiteManager, StorageAdvancedManager, storageAdvancedManager, HealthCheckManager, healthCheckManager, NetworkSecurityManager, networkSecurityManager, ResourceManagementManager, resourceManagementManager };

package/dist/{chunk-3mcfbrw8.js → chunk-tskj9fay.js}

@@ -8,7 +8,7 @@ import {
   phpRuntimeLayerAssets,
   runPhpBuildHooks,
   sha256
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 
 // src/deploy/serverless-image.ts
 import { execFileSync } from "node:child_process";

package/dist/deploy/index.js

@@ -12,10 +12,10 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "../chunk-rr3j38qr.js";
+} from "../chunk-crcjdm09.js";
 import {
   buildAndPushServerlessImage
-} from "../chunk-3mcfbrw8.js";
+} from "../chunk-tskj9fay.js";
 import"../chunk-b82pbxyp.js";
 import"../chunk-hsk6fe6x.js";
 import {
@@ -30,8 +30,8 @@ import {
   resolveUiSource,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-xdd6qvre.js";
-import"../chunk-k56wpkhg.js";
+} from "../chunk-0c69nbaa.js";
+import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import {
   deleteStaticSite,

package/dist/drivers/hetzner/client.d.ts

@@ -144,6 +144,14 @@ export declare class HetznerClient {
     private fetchImpl;
     constructor(options: HetznerClientOptions);
     private request;
+    /**
+     * Fetch every page of a list endpoint. Hetzner paginates lists at 25 items by
+     * default (max 50/page) and follows `meta.pagination.next_page`; without this,
+     * an account with more than one page of resources silently truncates — target
+     * lookups miss the project's own servers, and find-or-create attempts a
+     * duplicate create (409) for firewalls/keys that already exist.
+     */
+    private requestAll;
     listServers(): Promise<HetznerServer[]>;
     getServer(id: number): Promise<HetznerServer>;
     createServer(options: CreateServerOptions): Promise<{

package/dist/drivers/hetzner/driver.d.ts

@@ -93,6 +93,22 @@ export declare class HetznerDriver implements CloudDriver {
     private ensureSshKey;
     /** getServer that returns null instead of throwing when the server is gone. */
     private tryGetServer;
+    /**
+     * Rewrite a bun-fleet LB box's rpx route fragment (`sites.d/<slug>.json`)
+     * from the CURRENT sites model and the CURRENT app-box upstreams, then
+     * restart the gateway so the assembler re-merges. The LB box long outlives
+     * any single provision — without this refresh, the routes frozen at its
+     * first boot never learn about sites added/removed later or a changed
+     * app-fleet upstream set.
+     *
+     * App boxes without a routable address are dropped from the upstream list;
+     * when NO app box is routable the refresh is skipped entirely — rewriting
+     * the fragment with zero real upstreams would turn every route into a
+     * guaranteed 502, strictly worse than leaving the stale fragment in place.
+     * An SSH failure propagates: a deploy that cannot reach its LB to update
+     * routes must fail loudly, not silently serve stale ones.
+     */
+    private refreshLbRoutes;
     /**
      * Look up an existing ts-cloud server for this project/environment by labels
      * (falling back to name match). Used for idempotency when local state is

package/dist/drivers/index.d.ts

@@ -10,9 +10,9 @@ export { buildSshArgs, scpUpload, sshExec, sshExecOrThrow, waitForCloudInit, wai
 export type { RemoteExecOptions, RemoteExecResult, WaitOptions } from './shared/remote-exec';
 export { AwsBoxProvisioner, buildBoxUserData, createBoxProvisioner, HetznerBoxProvisioner, UBUNTU_2404_AMI_PARAM, } from './shared/box-provision';
 export type { AwsBoxProvisionerOptions, BoxPort, BoxProviderName, BoxProvisioner, BoxSpec, CreateBoxProvisionerOptions, ProvisionedBox, } from './shared/box-provision';
-export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, } from './shared/deploy-script';
+export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, releaseTarballTmpPath, resolveExecStart, } from './shared/deploy-script';
 export { deployAllComputeSites, deploySiteRelease, reloadRpxGateway } from './shared/compute-deploy';
-export { buildRpxConfig, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
-export type { BuildRpxConfigOptions, BuildRpxProvisionOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
+export { buildRpxConfig, buildRpxFragmentRefreshScript, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
+export type { BuildRpxConfigOptions, BuildRpxFragmentRefreshOptions, BuildRpxProvisionOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
 export { buildCloudFrontOriginConfig, MANAGED_CACHE_POLICY_DISABLED, MANAGED_CACHE_POLICY_OPTIMIZED, MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER, } from './shared/cloudfront-origin';
 export type { BuildCloudFrontOriginOptions, OriginFrontedBehavior, } from './shared/cloudfront-origin';

package/dist/drivers/index.js

@@ -19,6 +19,7 @@ import {
   buildCloudFrontOriginConfig,
   buildLocalArtifactFetch,
   buildRpxConfig,
+  buildRpxFragmentRefreshScript,
   buildRpxLbConfig,
   buildRpxProvisionScript,
   buildSiteDeployScript,
@@ -37,6 +38,7 @@ import {
   isBoxMode,
   normalizeRoutePath,
   normalizeSshPublicKey,
+  releaseTarballTmpPath,
   reloadRpxGateway,
   renderRpxLauncher,
   resolveExecStart,
@@ -48,8 +50,8 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-xdd6qvre.js";
-import"../chunk-k56wpkhg.js";
+} from "../chunk-0c69nbaa.js";
+import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import"../chunk-qpj3edwz.js";
 import"../chunk-vd87cpvn.js";
@@ -67,6 +69,7 @@ export {
   resolveExecStart,
   renderRpxLauncher,
   reloadRpxGateway,
+  releaseTarballTmpPath,
   normalizeSshPublicKey,
   normalizeRoutePath,
   isBoxMode,
@@ -85,6 +88,7 @@ export {
   buildSiteDeployScript,
   buildRpxProvisionScript,
   buildRpxLbConfig,
+  buildRpxFragmentRefreshScript,
   buildRpxConfig,
   buildLocalArtifactFetch,
   buildCloudFrontOriginConfig,

package/dist/drivers/local-box/driver.d.ts

@@ -13,7 +13,7 @@ export declare class LocalBoxDriver implements CloudDriver {
     readonly usesCloudFormation = false;
     getComputeOutputs(): Promise<ComputeStackOutputs>;
     uploadRelease(options: UploadReleaseOptions): Promise<UploadReleaseResult>;
-    findComputeTargets(_options: FindComputeTargetsOptions): Promise<ComputeTarget[]>;
+    findComputeTargets(options: FindComputeTargetsOptions): Promise<ComputeTarget[]>;
     runRemoteDeploy(options: RunRemoteDeployOptions): Promise<RemoteDeployResult>;
 }
 /** Truthy-env check shared by the box-mode gate. */

package/dist/drivers/shared/compute-deploy.d.ts

@@ -36,8 +36,14 @@ export interface DeployAllSitesOptions {
 export declare function deployAllComputeSites(options: DeployAllSitesOptions): Promise<boolean>;
 /**
  * Regenerate the rpx gateway config from the sites model and (re)start the
- * gateway on the compute targets. No-op (returns `true`) unless
- * `compute.proxy.engine === 'rpx'`. Re-runnable: the provision script writes the
- * launcher + unit and `systemctl restart`s, which reloads the new routes.
+ * gateway. No-op (returns `true`) unless `compute.proxy.engine === 'rpx'`.
+ *
+ * Two shapes, resolved by probing for a dedicated load-balancer target:
+ *  - **Fleet** (bun-style: one rpx LB box fronts N gateway-less app boxes) —
+ *    rewrite ONLY the LB's route fragment with the multi-upstream LB config
+ *    ({@link buildRpxLbConfig} + {@link buildRpxFragmentRefreshScript}).
+ *  - **Single box** — the gateway is co-located with the app, so the full
+ *    provision script runs on the app targets. Re-runnable: it rewrites the
+ *    launcher + unit and `systemctl restart`s, reloading the new routes.
  */
 export declare function reloadRpxGateway(options: DeployAllSitesOptions): Promise<boolean>;

package/dist/drivers/shared/deploy-script.d.ts

@@ -77,6 +77,8 @@ export interface BuildSiteDeployScriptOptions {
 export declare function buildSiteDeployScript(options: BuildSiteDeployScriptOptions): string[];
 export interface BuildStaticSiteDeployScriptOptions {
     siteName: string;
+    /** Project slug — namespaces the staged tarball on shared boxes. */
+    slug?: string;
     /** How the remote host obtains the release tarball */
     artifactFetch: string[];
     /** Site base dir holding `releases/`, `current`. Default `/var/www/<site>`. */
@@ -101,5 +103,13 @@ export interface BuildStaticSiteDeployScriptOptions {
  * tlsx), which ts-cloud points at the symlink. Old releases are pruned.
  */
 export declare function buildStaticSiteDeployScript(options: BuildStaticSiteDeployScriptOptions): string[];
-export declare function buildAwsArtifactFetch(bucket: string, key: string, region: string, siteName: string): string[];
-export declare function buildLocalArtifactFetch(localPath: string, siteName: string): string[];
+/**
+ * Box-local staging path for the uploaded release tarball. Namespaced by
+ * project slug + site + release id so two projects sharing a box (or two
+ * overlapping deploys of one site) never clobber each other's tarball between
+ * the fetch and the extract — the flat `/tmp/<site>-release.tar.gz` layout
+ * cross-contaminated releases on shared boxes.
+ */
+export declare function releaseTarballTmpPath(slug: string | undefined, siteName: string, releaseId: string): string;
+export declare function buildAwsArtifactFetch(bucket: string, key: string, region: string, destPath: string): string[];
+export declare function buildLocalArtifactFetch(localPath: string, destPath: string): string[];

package/dist/drivers/shared/fleet.d.ts

@@ -12,7 +12,7 @@
  * private network, and (required) a dedicated services box so every app server
  * shares one database/cache.
  */
-import type { ComputeConfig, DatabaseConfig } from '@ts-cloud/core';
+import type { CloudConfig, ComputeConfig, DatabaseConfig } from '@ts-cloud/core';
 export type FleetRole = 'app' | 'services' | 'lb';
 export interface FleetTopology {
     /** Number of application servers. */
@@ -32,3 +32,14 @@ export declare function resolveFleetTopology(compute?: ComputeConfig): FleetTopo
  * under `site.env` (explicit values win).
  */
 export declare function buildFleetServicesEnv(servicesPrivateIp: string, database?: DatabaseConfig): Record<string, string>;
+/**
+ * Build the provision commands for a fleet's dedicated services box (DB /
+ * cache / search only — no app runtime, no gateway). Shared by the PHP fleet
+ * and the bun/node/deno fleet so the two paths can never drift: engine
+ * installs bound to the private network, the app database + user, box
+ * maintenance, the on-box notifier (so the monitoring cron can report — a
+ * no-op unless notifications are configured), and — when `compute.backups`
+ * is enabled — the nightly DB backup, which MUST run here (where the
+ * database lives), never on an app box.
+ */
+export declare function buildFleetServicesBoxProvision(config: CloudConfig): string[];

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -297,3 +297,29 @@ export declare function buildCertManagementCommands(options: BuildRpxProvisionOp
  * server-app/server-static sites appear in the gateway automatically.
  */
 export declare function buildRpxProvisionScript(options: BuildRpxProvisionOptions): string[];
+export interface BuildRpxFragmentRefreshOptions {
+    /** The gateway config this deploy resolved (single-box or LB multi-upstream). */
+    config: RpxGatewayConfig;
+    /**
+     * This project's slug — the registry fragment is rewritten at
+     * `<sites.d>/<slug>.json`, exactly as in {@link buildRpxProvisionScript}.
+     * Defaults to `'app'`.
+     */
+    slug?: string;
+}
+/**
+ * Build the shell commands that rewrite ONLY this app's rpx route fragment
+ * (`<sites.d>/<slug>.json`) and restart the gateway, so the running assembler
+ * re-merges every fragment and the new routes go live.
+ *
+ * Unlike {@link buildRpxProvisionScript} this does NOT reinstall rpx/tlsx,
+ * rewrite the assembler launcher, or touch the systemd unit — it is the cheap
+ * reload for a box whose gateway is already provisioned. That is exactly the
+ * bun-fleet load-balancer situation: the LB box is created once (cloud-init
+ * writes the fragment at first boot) but long outlives any single deploy, so
+ * its routes must be refreshed from the CURRENT sites model + CURRENT app-box
+ * upstreams on every provision/deploy — otherwise sites added later 404 and
+ * app-fleet scale changes never reach the gateway. The `systemctl restart`
+ * re-runs the stable assembler, which re-reads all of {@link RPX_SITES_DIR}.
+ */
+export declare function buildRpxFragmentRefreshScript(options: BuildRpxFragmentRefreshOptions): string[];

package/dist/drivers/shared/ssh-keys.d.ts

@@ -15,7 +15,8 @@ export interface AuthorizedKeysOptions {
 }
 /**
  * Build the commands that reconcile the managed key block in authorized_keys.
- * Strips any previous ts-cloud block, then appends the current set. Returns `[]`
- * when there are no keys to manage.
+ * Strips any previous ts-cloud block, then appends the current set. An empty
+ * key set still strips the block — removing your last key from the config must
+ * remove it from the box (e.g. revoking a compromised key).
  */
 export declare function buildAuthorizedKeysScript(keys?: SshKeyConfig[], options?: AuthorizedKeysOptions): string[];

package/dist/index.js

@@ -55,10 +55,10 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "./chunk-rr3j38qr.js";
+} from "./chunk-crcjdm09.js";
 import {
   buildAndPushServerlessImage
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import {
   CloudWatchLogsClient,
   EFSClient,
@@ -105,7 +105,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-xdd6qvre.js";
+} from "./chunk-0c69nbaa.js";
 import {
   ABTestManager,
   AI,
@@ -446,6 +446,7 @@ import {
   replicaManager,
   requiresReplacement,
   resolveApp,
+  resolveAppDatabase,
   resolveCloudProvider,
   resolveCredentials,
   resolveDashboardDomain,
@@ -509,7 +510,7 @@ import {
   withSecurity,
   withTimeout,
   xrayManager
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 import {
   EC2Client,
   SSMClient
@@ -4729,6 +4730,7 @@ export {
   resolveDashboardAction,
   resolveCredentials,
   resolveCloudProvider,
+  resolveAppDatabase,
   resolveApp,
   requiresReplacement,
   replicaManager,