@stacksjs/ts-cloud 0.7.30 → 0.7.32

package/dist/{chunk-4ew46pj6.js → chunk-ebx9gjnn.js}

@@ -1,8 +1,8 @@
 import {
   buildAndPushServerlessImage
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import"./chunk-hsk6fe6x.js";
-import"./chunk-k56wpkhg.js";
+import"./chunk-stt1z5cx.js";
 import"./chunk-arsh1g5h.js";
 import"./chunk-v0bahtg2.js";
 export {

package/dist/{chunk-rr3j38qr.js → chunk-jgenfdz6.js}

@@ -6,7 +6,7 @@ import {
   step,
   success,
   warn
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import {
   CloudWatchLogsClient,
   CostExplorerClient,
@@ -22,19 +22,21 @@ import {
   buildBackupRestoreScript,
   buildRollbackScript,
   createCloudDriver,
+  pgAdminCommand,
   releasePaths,
   resolveHetznerLocation,
   resolveSiteFramework,
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-xdd6qvre.js";
+} from "./chunk-dah449r1.js";
 import {
   artifactKey,
   composeServerlessAppTemplate,
   laravelServerlessEnvDefaults,
   packagePhpApp,
   packageServerlessApp,
+  resolveAppDatabase,
   resolveDeploymentMode,
   resolveQueueNames,
   resolveQueues,
@@ -42,7 +44,7 @@ import {
   resolveServerlessArtifactBucketName,
   resolveServerlessAssetBucketName,
   resolveServerlessRuntime
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 import {
   deployStaticSiteWithExternalDnsFull
 } from "./chunk-d7p84vz5.js";
@@ -347,7 +349,7 @@ async function deployServerlessApp(config, environment, opts = {}) {
   }
   if (imageMode) {
     step("Building + pushing container image");
-    const { buildAndPushServerlessImage } = await import("./chunk-4ew46pj6.js");
+    const { buildAndPushServerlessImage } = await import("./chunk-ebx9gjnn.js");
     const built = await buildAndPushServerlessImage({
       app,
       projectRoot,
@@ -10894,7 +10896,7 @@ function normalizeEngine(engine) {
 }
 function resolveDbEngine(config6) {
   const compute = config6.infrastructure?.compute;
-  const declared = config6.infrastructure?.appDatabase?.engine;
+  const declared = resolveAppDatabase(config6)?.engine;
   if (declared)
     return normalizeEngine(declared);
   const managed = compute?.managedServices ?? {};
@@ -10912,33 +10914,33 @@ function mysqlExec(engine, sql) {
   const sock = engine === "mariadb" ? SOCKETS.mariadb : SOCKETS.mysql;
   return [`mysql --socket=${sock} -u root <<'TS_CLOUD_SQL_EOF'`, ...sql, "TS_CLOUD_SQL_EOF"];
 }
-function pgExec(sql) {
-  return ["psql -h 127.0.0.1 -p 5432 -U postgres -tA <<'TS_CLOUD_PG_EOF'", ...sql, "TS_CLOUD_PG_EOF"];
+function pgExec(sql, database) {
+  return [`${pgAdminCommand(database)} -tA <<'TS_CLOUD_PG_EOF'`, ...sql, "TS_CLOUD_PG_EOF"];
 }
-function buildListScript(engine) {
+function buildListScript(engine, database) {
   if (engine === "postgres") {
     return pgExec([
       "SELECT 'DB=' || datname FROM pg_database WHERE datistemplate = false;",
       "SELECT 'USER=' || usename FROM pg_user;"
-    ]);
+    ], database);
   }
   return mysqlExec(engine, [
     "SELECT CONCAT('DB=', schema_name) FROM information_schema.schemata WHERE schema_name NOT IN ('information_schema', 'mysql', 'performance_schema', 'sys');",
     "SELECT DISTINCT CONCAT('USER=', User) FROM mysql.user WHERE User NOT IN ('root', 'mysql.sys', 'mysql.session', 'mysql.infoschema', 'debian-sys-maint');"
   ]);
 }
-function buildCreateDatabaseScript(engine, name) {
+function buildCreateDatabaseScript(engine, name, database) {
   if (engine === "postgres") {
     return pgExec([
       `SELECT 'CREATE DATABASE ${pgIdent(name)}' WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = ${pgLit(name)})\\gexec`
-    ]);
+    ], database);
   }
   return mysqlExec(engine, [
     `CREATE DATABASE IF NOT EXISTS \`${mysqlIdent(name)}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;`
   ]);
 }
-function buildCreateUserScript(engine, input) {
-  const { username, password, database, access: access4 } = input;
+function buildCreateUserScript(engine, input, database) {
+  const { username, password, database: grantDb, access: access4 } = input;
   if (engine === "postgres") {
     const lines2 = [
       "DO $$ BEGIN",
@@ -10946,10 +10948,10 @@ function buildCreateUserScript(engine, input) {
       `  ELSE ALTER ROLE ${pgIdent(username)} LOGIN PASSWORD ${pgLit(password)}; END IF;`,
       "END $$;"
     ];
-    if (database) {
-      lines2.push(access4 === "readonly" ? `GRANT CONNECT ON DATABASE ${pgIdent(database)} TO ${pgIdent(username)};` : `GRANT ALL PRIVILEGES ON DATABASE ${pgIdent(database)} TO ${pgIdent(username)};`);
+    if (grantDb) {
+      lines2.push(access4 === "readonly" ? `GRANT CONNECT ON DATABASE ${pgIdent(grantDb)} TO ${pgIdent(username)};` : `GRANT ALL PRIVILEGES ON DATABASE ${pgIdent(grantDb)} TO ${pgIdent(username)};`);
     }
-    return pgExec(lines2);
+    return pgExec(lines2, database);
   }
   const priv = access4 === "readonly" ? "SELECT" : "ALL PRIVILEGES";
   const lines = [
@@ -10958,8 +10960,8 @@ function buildCreateUserScript(engine, input) {
     `ALTER USER '${mysqlLit(username)}'@'%' IDENTIFIED BY '${mysqlLit(password)}';`,
     `ALTER USER '${mysqlLit(username)}'@'localhost' IDENTIFIED BY '${mysqlLit(password)}';`
   ];
-  if (database) {
-    lines.push(`GRANT ${priv} ON \`${mysqlIdent(database)}\`.* TO '${mysqlLit(username)}'@'%';`, `GRANT ${priv} ON \`${mysqlIdent(database)}\`.* TO '${mysqlLit(username)}'@'localhost';`);
+  if (grantDb) {
+    lines.push(`GRANT ${priv} ON \`${mysqlIdent(grantDb)}\`.* TO '${mysqlLit(username)}'@'%';`, `GRANT ${priv} ON \`${mysqlIdent(grantDb)}\`.* TO '${mysqlLit(username)}'@'localhost';`);
   }
   lines.push("FLUSH PRIVILEGES;");
   return mysqlExec(engine, lines);
@@ -11001,24 +11003,24 @@ async function runDb(config6, environment, commands, comment) {
 }
 async function listDatabases(config6, environment) {
   const engine = resolveDbEngine(config6);
-  const r = await runDb(config6, environment, buildListScript(engine), "ts-cloud db:list");
+  const r = await runDb(config6, environment, buildListScript(engine, resolveAppDatabase(config6)), "ts-cloud db:list");
   const parsed = r.ok && r.stdout ? parseDbList(r.stdout) : { databases: [], users: [] };
   return { ...r, engine, ...parsed };
 }
 async function createDatabase(config6, environment, name) {
   const engine = resolveDbEngine(config6);
-  return runDb(config6, environment, buildCreateDatabaseScript(engine, name), `ts-cloud db:create ${name}`);
+  return runDb(config6, environment, buildCreateDatabaseScript(engine, name, resolveAppDatabase(config6)), `ts-cloud db:create ${name}`);
 }
 async function createDatabaseUser(config6, environment, input) {
   const engine = resolveDbEngine(config6);
-  return runDb(config6, environment, buildCreateUserScript(engine, input), `ts-cloud db:user ${input.username}`);
+  return runDb(config6, environment, buildCreateUserScript(engine, input, resolveAppDatabase(config6)), `ts-cloud db:user ${input.username}`);
 }
 var DB_BACKUP_DIR = "/var/backups/ts-cloud/databases";
-function buildBackupScript(engine, name, destDir = DB_BACKUP_DIR) {
+function buildBackupScript(engine, name, destDir = DB_BACKUP_DIR, database) {
   const file = `${destDir}/${name}-$(date +%Y%m%d-%H%M%S).sql.gz`;
   const mkdir4 = `mkdir -p ${destDir}`;
   if (engine === "postgres")
-    return [mkdir4, `pg_dump -h 127.0.0.1 -p 5432 -U postgres ${name} | gzip > "${file}"`, `echo "BACKUP=${file}"`, `ls -l "${file}"`];
+    return [mkdir4, `${pgAdminCommand(database, "pg_dump")} ${name} | gzip > "${file}"`, `echo "BACKUP=${file}"`, `ls -l "${file}"`];
   const sock = engine === "mariadb" ? SOCKETS.mariadb : SOCKETS.mysql;
   return [mkdir4, `mysqldump --socket=${sock} -u root ${name} | gzip > "${file}"`, `echo "BACKUP=${file}"`, `ls -l "${file}"`];
 }
@@ -11044,7 +11046,7 @@ async function backupDatabase(config6, environment, name) {
   if (!isValidDbIdentifier(name))
     return { ok: false, error: "Database name must be a valid identifier.", database: name };
   const engine = resolveDbEngine(config6);
-  const r = await runDb(config6, environment, buildBackupScript(engine, name), `ts-cloud db:backup ${name}`);
+  const r = await runDb(config6, environment, buildBackupScript(engine, name, DB_BACKUP_DIR, resolveAppDatabase(config6)), `ts-cloud db:backup ${name}`);
   return { ...r, database: name };
 }
 async function listDatabaseBackups(config6, environment) {
@@ -11626,7 +11628,7 @@ function buildDashboardOperations(config6, data) {
   const backups = config6.infrastructure?.compute?.backups;
   if (backups?.enabled) {
     ops.push({ id: "backup:run", label: "Run backup now", group: "backup", target: "backup", mutates: true, confirm: "backup" });
-    if (config6.infrastructure?.appDatabase)
+    if (resolveAppDatabase(config6))
       ops.push({ id: "backup:restore", label: "Restore latest DB backup", group: "backup", target: "database", mutates: true, confirm: "restore", danger: true });
   }
   return ops;
@@ -11702,7 +11704,7 @@ async function runDashboardOperation(config6, environment, operation, options =
     return fromComputeOps(operation.id, `rollback ${operation.target}${to ? ` → ${to}` : ""}`, r);
   }
   if (operation.id === "backup:restore") {
-    const r = await restoreDatabaseBackup(ctx, { database: config6.infrastructure?.appDatabase });
+    const r = await restoreDatabaseBackup(ctx, { database: resolveAppDatabase(config6) });
     return fromComputeOps(operation.id, "db restore", r);
   }
   const targets = await driver.findComputeTargets({ slug, environment, role: "app" });

package/dist/{chunk-k56wpkhg.js → chunk-stt1z5cx.js}

@@ -1140,6 +1140,9 @@ function deploymentCoexistenceError(config) {
   }
   return null;
 }
+function resolveAppDatabase(config) {
+  return config.infrastructure?.appDatabase ?? config.infrastructure?.compute?.database;
+}
 function resolveCloudProvider(config) {
   if (config.cloud?.provider)
     return config.cloud.provider;
@@ -46181,4 +46184,4 @@ class ResourceManagementManager {
 }
 var resourceManagementManager = new ResourceManagementManager;
 
-export { detectServiceRegion, signRequest, signRequestAsync, createPresignedUrl, createPresignedUrlAsync, makeAWSRequest, makeAWSRequestOnce, makeAWSRequestAsync, parseXMLResponse, parseJSONResponse, clearSigningKeyCache, getSigningKeyCacheSize, isNodeCryptoAvailable, isWebCryptoAvailable, QueuePresets, RealtimePresets, detectDeploymentTargets, resolveDeploymentMode, deploymentCoexistenceError, resolveCloudProvider, TemplateBuilder, Pseudo, generateResourceName, generateLogicalId, getTimestamp, sanitizeName, resolveProjectStackName, resolveSiteStackName, resolveSiteResourceName, resolveSiteBucketName, resolveStorageBucketName, resolveDeployBucketName, resolveServerlessAppStackName, resolveServerlessArtifactBucketName, resolveServerlessAssetBucketName, DependencyGraph, analyzeStackDiff, formatDiff, Storage, Registry, CDN, DNS, Security, Compute, Network, FileSystem, Email, exports_incoming_call, Phone, Queue, JobLoader, StacksIntegration, exports_send, SMS, AI, Database, Cache, Permissions, ApiGateway, Messaging, Workflow, Monitoring, Auth, Deployment, AssetHasher, Secrets, ParameterStore, Search, Redirects, Communication, Fn2, Arn, AWS_PSEUDO_PARAMETERS, CloudFormationBuilder, buildCloudFormationTemplate, createStaticSitePreset, createNodeJsServerPreset, createNodeJsServerlessPreset, createServerlessNodePreset, createFullStackAppPreset, createApiBackendPreset, createWordPressPreset, createJamstackPreset, createMicroservicesPreset, createRealtimeAppPreset, createDataPipelinePreset, createMLApiPreset, createTraditionalWebAppPreset, createLaravelPreset, createServerlessLaravelPreset, createDashboardSite, DASHBOARD_STATE_DIR, DASHBOARD_ENTRY, DASHBOARD_PORT_BASE, DASHBOARD_PORT_SPAN, deriveManagementDashboardPort, resolveDashboardDomain, resolveDashboardDomains, hasManagementDashboardSite, MANAGEMENT_DASHBOARD_SITE_PREFIX, managementDashboardSiteName, isManagementDashboardSiteName, resolveManagementDashboardSites, resolveManagementDashboardSite, extendPreset, composePresets, createPreset, mergeInfrastructure, withMonitoring, withSecurity, withDatabase, withCache, withCDN, withQueue, fromEnvironment, fromSharedCredentials, fromEC2Metadata, fromECSMetadata, fromWebIdentity, getCredentials, createCredentialProvider, resolveCredentials, resolveRegion, getAccountId, S3Error, createS3Client, CloudError, ConfigurationError, CredentialError, DeploymentError, ValidationError, AWSAPIError, ErrorCodes, getErrorDetails, createError, DebugLogger, validateConfiguration, detectMisconfigurations, validateCredentials, checkIAMPermissions, getRequiredPermissions, suggestIAMPolicy, DEFAULT_SERVICE_LIMITS, checkServiceQuotas, getQuotaUsageSummary, suggestQuotaIncrease, FileCache, TemplateCache, templateCache, hashFile, hashString, hashBuffer, hashDirectory, hashManifest, quickHash, findChangedFiles, HashCache, parallel, batch, parallelMap, parallelWithRetry, sequence, withTimeout, RateLimiter, chunk, processInChunks, diffTemplates, getDiffSummary, requiresReplacement, categorizeChanges, getDeploymentStrategy, getDiffStats, cloud_config_schema_default, validateAgainstSchema, defaultLocalConfig, getLocalConfig, isLocalDevelopment, getLocalEndpoint, getLocalCredentials, getLocalEnvVars, MockCloudFormation, MockS3, MockDynamoDB, createMockAWS, PreviewEnvironmentManager, previewManager, generatePreviewWorkflow, generateCleanupWorkflow, generateCostReportWorkflow, PreviewNotificationService, previewNotifications, formatTable, formatTree, formatProgressBar, formatBytes, formatDuration, formatList, formatKeyValue, ProgressBar, MultiStepProgress, Spinner, TaskList, suggestCommand, formatSuggestion, isLikelyTypo, getContextualHelp, searchCommands, autocomplete, suggestFlags, formatFlagSuggestions, getCommandUsage, validateCommand, REPL, REPLContext, REPLCommandBuilder, CommandHistory, formatHistory, formatHistoryStats, MultiRegionManager, multiRegionManager, CrossRegionReferenceManager, GlobalResourceManager, RegionPairManager, StackDependencyManager, crossRegionReferenceManager, globalResourceManager, regionPairManager, stackDependencyManager, AWS_REGIONS, getRegion, getAllRegions, getRegionsByLocation, getRegionsByCompliance, getRegionsByPricingTier, isValidRegion, getClosestRegion, suggestRegions, suggestRegionPairs, formatRegion, formatRegionList, getRegionStats, MultiAccountManager, OrganizationManager, multiAccountManager, organizationManager, RECOMMENDED_ACCOUNT_STRUCTURES, RECOMMENDED_SCPS, COMMON_CROSS_ACCOUNT_ROLES, getRecommendedStructure, generateCrossAccountRoleCF, validateAccountStructure, formatAccountStructure, generateDeploymentWorkflow, generateMultiEnvWorkflow, generatePRPreviewWorkflow, generateScheduledWorkflow, generateMatrixWorkflow, generateDeploymentPipeline, generateMultiEnvPipeline, generatePreviewPipeline, generateScheduledPipeline, generateManualPipeline, generateDeploymentConfig, generateMultiEnvConfig, generateScheduledConfig, generateApprovalConfig, generateParallelConfig, BackupManager, backupManager, DisasterRecoveryManager, drManager, AWSConfigManager, awsConfigManager, CloudTrailManager, cloudTrailManager, GuardDutyManager, guardDutyManager, SecurityHubManager, securityHubManager, BlueGreenManager, blueGreenManager, CanaryManager, canaryManager, ABTestManager, abTestManager, ProgressiveDeploymentManager, progressiveDeploymentManager, XRayManager, xrayManager, MetricsManager, metricsManager, LogsManager, logsManager, SyntheticsManager, syntheticsManager, MigrationManager, migrationManager, ReplicaManager, replicaManager, PerformanceManager, performanceManager, DatabaseUserManager, databaseUserManager, SecretsRotationManager, secretsRotationManager, SecretsManager, secretsManager, CertificateManager, certificateManager, SecurityScanningManager, securityScanningManager, ImageScanningManager, imageScanningManager, BuildOptimizationManager, buildOptimizationManager, ContainerRegistryManager, containerRegistryManager, ServiceMeshManager, serviceMeshManager, LambdaLayersManager, lambdaLayersManager, LambdaVersionsManager, lambdaVersionsManager, LambdaConcurrencyManager, lambdaConcurrencyManager, LambdaDestinationsManager, lambdaDestinationsManager, LambdaVPCManager, lambdaVPCManager, LambdaDLQManager, lambdaDLQManager, Route53RoutingManager, route53RoutingManager, DNSSECManager, dnssecManager, Route53ResolverManager, route53ResolverManager, BounceComplaintHandler, bounceComplaintHandler, EmailAnalyticsManager, emailAnalyticsManager, SenderReputationManager, senderReputationManager, EmailTemplateManager, emailTemplateManager, exports_advanced, exports_inbound, exports_advanced2, exports_advanced3, FIFOQueueManager, fifoQueueManager, DLQMonitoringManager, dlqMonitoringManager, BatchProcessingManager, batchProcessingManager, QueueManagementManager, queueManagementManager, createZip, generateBootstrap, runBuildHooks, sha256, artifactKey, packageServerlessApp, MANAGED_NODE_VERSIONS, resolveServerlessRuntime, resolveQueues, resolveQueueNames, composeServerlessAppTemplate, PHP_LAYER_EXTENSIONS, phpLayerPackages, phpLayerBuildStage, generatePhpLayerDockerfile, generateAppImageDockerfile, sharedRuntimeLoop, buildNodeRuntimeLayerZip, buildBunRuntimeLayerZip, resolveApp, eventToRequest, responseToResult, createHttpHandler, createQueueHandler, createCliHandler, createHandlers, generatePhpFpmConfig, phpRuntimeLayerAssets, laravelServerlessEnvDefaults, LARAVEL_SERVERLESS_BUILD_STEPS, buildPhpRuntimeLayerZip, PHP_DEFAULT_EXCLUDES, runPhpBuildHooks, collectPhpAppEntries, packagePhpApp, StaticSiteManager, staticSiteManager, StorageAdvancedManager, storageAdvancedManager, HealthCheckManager, healthCheckManager, NetworkSecurityManager, networkSecurityManager, ResourceManagementManager, resourceManagementManager };
+export { detectServiceRegion, signRequest, signRequestAsync, createPresignedUrl, createPresignedUrlAsync, makeAWSRequest, makeAWSRequestOnce, makeAWSRequestAsync, parseXMLResponse, parseJSONResponse, clearSigningKeyCache, getSigningKeyCacheSize, isNodeCryptoAvailable, isWebCryptoAvailable, QueuePresets, RealtimePresets, detectDeploymentTargets, resolveDeploymentMode, deploymentCoexistenceError, resolveAppDatabase, resolveCloudProvider, TemplateBuilder, Pseudo, generateResourceName, generateLogicalId, getTimestamp, sanitizeName, resolveProjectStackName, resolveSiteStackName, resolveSiteResourceName, resolveSiteBucketName, resolveStorageBucketName, resolveDeployBucketName, resolveServerlessAppStackName, resolveServerlessArtifactBucketName, resolveServerlessAssetBucketName, DependencyGraph, analyzeStackDiff, formatDiff, Storage, Registry, CDN, DNS, Security, Compute, Network, FileSystem, Email, exports_incoming_call, Phone, Queue, JobLoader, StacksIntegration, exports_send, SMS, AI, Database, Cache, Permissions, ApiGateway, Messaging, Workflow, Monitoring, Auth, Deployment, AssetHasher, Secrets, ParameterStore, Search, Redirects, Communication, Fn2, Arn, AWS_PSEUDO_PARAMETERS, CloudFormationBuilder, buildCloudFormationTemplate, createStaticSitePreset, createNodeJsServerPreset, createNodeJsServerlessPreset, createServerlessNodePreset, createFullStackAppPreset, createApiBackendPreset, createWordPressPreset, createJamstackPreset, createMicroservicesPreset, createRealtimeAppPreset, createDataPipelinePreset, createMLApiPreset, createTraditionalWebAppPreset, createLaravelPreset, createServerlessLaravelPreset, createDashboardSite, DASHBOARD_STATE_DIR, DASHBOARD_ENTRY, DASHBOARD_PORT_BASE, DASHBOARD_PORT_SPAN, deriveManagementDashboardPort, resolveDashboardDomain, resolveDashboardDomains, hasManagementDashboardSite, MANAGEMENT_DASHBOARD_SITE_PREFIX, managementDashboardSiteName, isManagementDashboardSiteName, resolveManagementDashboardSites, resolveManagementDashboardSite, extendPreset, composePresets, createPreset, mergeInfrastructure, withMonitoring, withSecurity, withDatabase, withCache, withCDN, withQueue, fromEnvironment, fromSharedCredentials, fromEC2Metadata, fromECSMetadata, fromWebIdentity, getCredentials, createCredentialProvider, resolveCredentials, resolveRegion, getAccountId, S3Error, createS3Client, CloudError, ConfigurationError, CredentialError, DeploymentError, ValidationError, AWSAPIError, ErrorCodes, getErrorDetails, createError, DebugLogger, validateConfiguration, detectMisconfigurations, validateCredentials, checkIAMPermissions, getRequiredPermissions, suggestIAMPolicy, DEFAULT_SERVICE_LIMITS, checkServiceQuotas, getQuotaUsageSummary, suggestQuotaIncrease, FileCache, TemplateCache, templateCache, hashFile, hashString, hashBuffer, hashDirectory, hashManifest, quickHash, findChangedFiles, HashCache, parallel, batch, parallelMap, parallelWithRetry, sequence, withTimeout, RateLimiter, chunk, processInChunks, diffTemplates, getDiffSummary, requiresReplacement, categorizeChanges, getDeploymentStrategy, getDiffStats, cloud_config_schema_default, validateAgainstSchema, defaultLocalConfig, getLocalConfig, isLocalDevelopment, getLocalEndpoint, getLocalCredentials, getLocalEnvVars, MockCloudFormation, MockS3, MockDynamoDB, createMockAWS, PreviewEnvironmentManager, previewManager, generatePreviewWorkflow, generateCleanupWorkflow, generateCostReportWorkflow, PreviewNotificationService, previewNotifications, formatTable, formatTree, formatProgressBar, formatBytes, formatDuration, formatList, formatKeyValue, ProgressBar, MultiStepProgress, Spinner, TaskList, suggestCommand, formatSuggestion, isLikelyTypo, getContextualHelp, searchCommands, autocomplete, suggestFlags, formatFlagSuggestions, getCommandUsage, validateCommand, REPL, REPLContext, REPLCommandBuilder, CommandHistory, formatHistory, formatHistoryStats, MultiRegionManager, multiRegionManager, CrossRegionReferenceManager, GlobalResourceManager, RegionPairManager, StackDependencyManager, crossRegionReferenceManager, globalResourceManager, regionPairManager, stackDependencyManager, AWS_REGIONS, getRegion, getAllRegions, getRegionsByLocation, getRegionsByCompliance, getRegionsByPricingTier, isValidRegion, getClosestRegion, suggestRegions, suggestRegionPairs, formatRegion, formatRegionList, getRegionStats, MultiAccountManager, OrganizationManager, multiAccountManager, organizationManager, RECOMMENDED_ACCOUNT_STRUCTURES, RECOMMENDED_SCPS, COMMON_CROSS_ACCOUNT_ROLES, getRecommendedStructure, generateCrossAccountRoleCF, validateAccountStructure, formatAccountStructure, generateDeploymentWorkflow, generateMultiEnvWorkflow, generatePRPreviewWorkflow, generateScheduledWorkflow, generateMatrixWorkflow, generateDeploymentPipeline, generateMultiEnvPipeline, generatePreviewPipeline, generateScheduledPipeline, generateManualPipeline, generateDeploymentConfig, generateMultiEnvConfig, generateScheduledConfig, generateApprovalConfig, generateParallelConfig, BackupManager, backupManager, DisasterRecoveryManager, drManager, AWSConfigManager, awsConfigManager, CloudTrailManager, cloudTrailManager, GuardDutyManager, guardDutyManager, SecurityHubManager, securityHubManager, BlueGreenManager, blueGreenManager, CanaryManager, canaryManager, ABTestManager, abTestManager, ProgressiveDeploymentManager, progressiveDeploymentManager, XRayManager, xrayManager, MetricsManager, metricsManager, LogsManager, logsManager, SyntheticsManager, syntheticsManager, MigrationManager, migrationManager, ReplicaManager, replicaManager, PerformanceManager, performanceManager, DatabaseUserManager, databaseUserManager, SecretsRotationManager, secretsRotationManager, SecretsManager, secretsManager, CertificateManager, certificateManager, SecurityScanningManager, securityScanningManager, ImageScanningManager, imageScanningManager, BuildOptimizationManager, buildOptimizationManager, ContainerRegistryManager, containerRegistryManager, ServiceMeshManager, serviceMeshManager, LambdaLayersManager, lambdaLayersManager, LambdaVersionsManager, lambdaVersionsManager, LambdaConcurrencyManager, lambdaConcurrencyManager, LambdaDestinationsManager, lambdaDestinationsManager, LambdaVPCManager, lambdaVPCManager, LambdaDLQManager, lambdaDLQManager, Route53RoutingManager, route53RoutingManager, DNSSECManager, dnssecManager, Route53ResolverManager, route53ResolverManager, BounceComplaintHandler, bounceComplaintHandler, EmailAnalyticsManager, emailAnalyticsManager, SenderReputationManager, senderReputationManager, EmailTemplateManager, emailTemplateManager, exports_advanced, exports_inbound, exports_advanced2, exports_advanced3, FIFOQueueManager, fifoQueueManager, DLQMonitoringManager, dlqMonitoringManager, BatchProcessingManager, batchProcessingManager, QueueManagementManager, queueManagementManager, createZip, generateBootstrap, runBuildHooks, sha256, artifactKey, packageServerlessApp, MANAGED_NODE_VERSIONS, resolveServerlessRuntime, resolveQueues, resolveQueueNames, composeServerlessAppTemplate, PHP_LAYER_EXTENSIONS, phpLayerPackages, phpLayerBuildStage, generatePhpLayerDockerfile, generateAppImageDockerfile, sharedRuntimeLoop, buildNodeRuntimeLayerZip, buildBunRuntimeLayerZip, resolveApp, eventToRequest, responseToResult, createHttpHandler, createQueueHandler, createCliHandler, createHandlers, generatePhpFpmConfig, phpRuntimeLayerAssets, laravelServerlessEnvDefaults, LARAVEL_SERVERLESS_BUILD_STEPS, buildPhpRuntimeLayerZip, PHP_DEFAULT_EXCLUDES, runPhpBuildHooks, collectPhpAppEntries, packagePhpApp, StaticSiteManager, staticSiteManager, StorageAdvancedManager, storageAdvancedManager, HealthCheckManager, healthCheckManager, NetworkSecurityManager, networkSecurityManager, ResourceManagementManager, resourceManagementManager };

package/dist/{chunk-3mcfbrw8.js → chunk-tskj9fay.js}

@@ -8,7 +8,7 @@ import {
   phpRuntimeLayerAssets,
   runPhpBuildHooks,
   sha256
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 
 // src/deploy/serverless-image.ts
 import { execFileSync } from "node:child_process";

package/dist/deploy/dashboard-database.d.ts

@@ -4,20 +4,20 @@
  * the pantry UNIX socket; Postgres over local TCP — mirroring the provisioning
  * path in {@link import('../drivers/shared/db-provision')}.
  */
-import type { CloudConfig, EnvironmentType } from '@ts-cloud/core';
+import type { CloudConfig, DatabaseConfig, EnvironmentType } from '@ts-cloud/core';
 export type DbEngine = 'mysql' | 'mariadb' | 'postgres';
 /** Valid SQL identifier for a database/user name (kept strict for safety). */
 export declare function isValidDbIdentifier(value: string): boolean;
 export declare function resolveDbEngine(config: CloudConfig): DbEngine;
-export declare function buildListScript(engine: DbEngine): string[];
-export declare function buildCreateDatabaseScript(engine: DbEngine, name: string): string[];
+export declare function buildListScript(engine: DbEngine, database?: DatabaseConfig): string[];
+export declare function buildCreateDatabaseScript(engine: DbEngine, name: string, database?: DatabaseConfig): string[];
 export interface CreateUserInput {
     username: string;
     password: string;
     database?: string;
     access?: 'all' | 'readonly';
 }
-export declare function buildCreateUserScript(engine: DbEngine, input: CreateUserInput): string[];
+export declare function buildCreateUserScript(engine: DbEngine, input: CreateUserInput, database?: DatabaseConfig): string[];
 export declare function parseDbList(output: string): {
     databases: string[];
     users: string[];
@@ -40,9 +40,11 @@ export declare const DB_BACKUP_DIR = "/var/backups/ts-cloud/databases";
 /**
  * Script that dumps a single database to a timestamped, gzipped file. The name
  * is a validated SQL identifier (no shell metacharacters), so it is safe to
- * embed directly. The timestamp is computed on the box.
+ * embed directly. The timestamp is computed on the box. Postgres connects over
+ * the local unix socket for a co-located engine, or TCP with credentials for
+ * an external host (see {@link pgAdminCommand}).
  */
-export declare function buildBackupScript(engine: DbEngine, name: string, destDir?: string): string[];
+export declare function buildBackupScript(engine: DbEngine, name: string, destDir?: string, database?: DatabaseConfig): string[];
 /** Script that lists the most recent dumps (newest first). */
 export declare function buildListBackupsScript(destDir?: string): string[];
 export declare function parseBackups(output: string): Array<{

package/dist/deploy/index.js

@@ -12,10 +12,10 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "../chunk-rr3j38qr.js";
+} from "../chunk-jgenfdz6.js";
 import {
   buildAndPushServerlessImage
-} from "../chunk-3mcfbrw8.js";
+} from "../chunk-tskj9fay.js";
 import"../chunk-b82pbxyp.js";
 import"../chunk-hsk6fe6x.js";
 import {
@@ -30,8 +30,8 @@ import {
   resolveUiSource,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-xdd6qvre.js";
-import"../chunk-k56wpkhg.js";
+} from "../chunk-dah449r1.js";
+import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import {
   deleteStaticSite,

package/dist/drivers/hetzner/client.d.ts

@@ -144,6 +144,14 @@ export declare class HetznerClient {
     private fetchImpl;
     constructor(options: HetznerClientOptions);
     private request;
+    /**
+     * Fetch every page of a list endpoint. Hetzner paginates lists at 25 items by
+     * default (max 50/page) and follows `meta.pagination.next_page`; without this,
+     * an account with more than one page of resources silently truncates — target
+     * lookups miss the project's own servers, and find-or-create attempts a
+     * duplicate create (409) for firewalls/keys that already exist.
+     */
+    private requestAll;
     listServers(): Promise<HetznerServer[]>;
     getServer(id: number): Promise<HetznerServer>;
     createServer(options: CreateServerOptions): Promise<{

package/dist/drivers/hetzner/driver.d.ts

@@ -93,6 +93,22 @@ export declare class HetznerDriver implements CloudDriver {
     private ensureSshKey;
     /** getServer that returns null instead of throwing when the server is gone. */
     private tryGetServer;
+    /**
+     * Rewrite a bun-fleet LB box's rpx route fragment (`sites.d/<slug>.json`)
+     * from the CURRENT sites model and the CURRENT app-box upstreams, then
+     * restart the gateway so the assembler re-merges. The LB box long outlives
+     * any single provision — without this refresh, the routes frozen at its
+     * first boot never learn about sites added/removed later or a changed
+     * app-fleet upstream set.
+     *
+     * App boxes without a routable address are dropped from the upstream list;
+     * when NO app box is routable the refresh is skipped entirely — rewriting
+     * the fragment with zero real upstreams would turn every route into a
+     * guaranteed 502, strictly worse than leaving the stale fragment in place.
+     * An SSH failure propagates: a deploy that cannot reach its LB to update
+     * routes must fail loudly, not silently serve stale ones.
+     */
+    private refreshLbRoutes;
     /**
      * Look up an existing ts-cloud server for this project/environment by labels
      * (falling back to name match). Used for idempotency when local state is

package/dist/drivers/index.d.ts

@@ -10,9 +10,9 @@ export { buildSshArgs, scpUpload, sshExec, sshExecOrThrow, waitForCloudInit, wai
 export type { RemoteExecOptions, RemoteExecResult, WaitOptions } from './shared/remote-exec';
 export { AwsBoxProvisioner, buildBoxUserData, createBoxProvisioner, HetznerBoxProvisioner, UBUNTU_2404_AMI_PARAM, } from './shared/box-provision';
 export type { AwsBoxProvisionerOptions, BoxPort, BoxProviderName, BoxProvisioner, BoxSpec, CreateBoxProvisionerOptions, ProvisionedBox, } from './shared/box-provision';
-export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, resolveExecStart, } from './shared/deploy-script';
+export { buildAwsArtifactFetch, buildLocalArtifactFetch, buildSiteDeployScript, buildStaticSiteDeployScript, releaseTarballTmpPath, resolveExecStart, } from './shared/deploy-script';
 export { deployAllComputeSites, deploySiteRelease, reloadRpxGateway } from './shared/compute-deploy';
-export { buildRpxConfig, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
-export type { BuildRpxConfigOptions, BuildRpxProvisionOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
+export { buildRpxConfig, buildRpxFragmentRefreshScript, buildRpxLbConfig, buildRpxProvisionScript, deriveRouteId, normalizeRoutePath, renderRpxLauncher, DEFAULT_RPX_CERTS_DIR, RPX_DIR, RPX_LAUNCHER_PATH, RPX_SERVICE_NAME, } from './shared/rpx-gateway';
+export type { BuildRpxConfigOptions, BuildRpxFragmentRefreshOptions, BuildRpxProvisionOptions, RpxGatewayConfig, RpxLbAppBox, RpxRoute, } from './shared/rpx-gateway';
 export { buildCloudFrontOriginConfig, MANAGED_CACHE_POLICY_DISABLED, MANAGED_CACHE_POLICY_OPTIMIZED, MANAGED_ORIGIN_REQUEST_POLICY_ALL_VIEWER, } from './shared/cloudfront-origin';
 export type { BuildCloudFrontOriginOptions, OriginFrontedBehavior, } from './shared/cloudfront-origin';

package/dist/drivers/index.js

@@ -19,6 +19,7 @@ import {
   buildCloudFrontOriginConfig,
   buildLocalArtifactFetch,
   buildRpxConfig,
+  buildRpxFragmentRefreshScript,
   buildRpxLbConfig,
   buildRpxProvisionScript,
   buildSiteDeployScript,
@@ -37,6 +38,7 @@ import {
   isBoxMode,
   normalizeRoutePath,
   normalizeSshPublicKey,
+  releaseTarballTmpPath,
   reloadRpxGateway,
   renderRpxLauncher,
   resolveExecStart,
@@ -48,8 +50,8 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-xdd6qvre.js";
-import"../chunk-k56wpkhg.js";
+} from "../chunk-dah449r1.js";
+import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import"../chunk-qpj3edwz.js";
 import"../chunk-vd87cpvn.js";
@@ -67,6 +69,7 @@ export {
   resolveExecStart,
   renderRpxLauncher,
   reloadRpxGateway,
+  releaseTarballTmpPath,
   normalizeSshPublicKey,
   normalizeRoutePath,
   isBoxMode,
@@ -85,6 +88,7 @@ export {
   buildSiteDeployScript,
   buildRpxProvisionScript,
   buildRpxLbConfig,
+  buildRpxFragmentRefreshScript,
   buildRpxConfig,
   buildLocalArtifactFetch,
   buildCloudFrontOriginConfig,

package/dist/drivers/local-box/driver.d.ts

@@ -13,7 +13,7 @@ export declare class LocalBoxDriver implements CloudDriver {
     readonly usesCloudFormation = false;
     getComputeOutputs(): Promise<ComputeStackOutputs>;
     uploadRelease(options: UploadReleaseOptions): Promise<UploadReleaseResult>;
-    findComputeTargets(_options: FindComputeTargetsOptions): Promise<ComputeTarget[]>;
+    findComputeTargets(options: FindComputeTargetsOptions): Promise<ComputeTarget[]>;
     runRemoteDeploy(options: RunRemoteDeployOptions): Promise<RemoteDeployResult>;
 }
 /** Truthy-env check shared by the box-mode gate. */

package/dist/drivers/shared/backups.d.ts

@@ -34,7 +34,9 @@ export interface BackupRestoreOptions {
  * Build the commands that restore a database from a ts-backups dump on the box.
  * With no `from`, the newest dump under {@link BACKUP_OUTPUT_DIR} matching the
  * database name is used. Handles plain `.sql` and gzipped `.sql.gz`. MySQL/
- * MariaDB restore over the root unix socket; Postgres via `psql -U postgres`.
+ * MariaDB restore over the root unix socket; Postgres over the local unix
+ * socket for a co-located engine, or TCP with credentials for an external
+ * host (see {@link pgAdminCommand}).
  * Returns `[]` when the database has no name.
  */
 export declare function buildBackupRestoreScript(database: DatabaseConfig | undefined, options?: BackupRestoreOptions): string[];

package/dist/drivers/shared/compute-deploy.d.ts

@@ -36,8 +36,14 @@ export interface DeployAllSitesOptions {
 export declare function deployAllComputeSites(options: DeployAllSitesOptions): Promise<boolean>;
 /**
  * Regenerate the rpx gateway config from the sites model and (re)start the
- * gateway on the compute targets. No-op (returns `true`) unless
- * `compute.proxy.engine === 'rpx'`. Re-runnable: the provision script writes the
- * launcher + unit and `systemctl restart`s, which reloads the new routes.
+ * gateway. No-op (returns `true`) unless `compute.proxy.engine === 'rpx'`.
+ *
+ * Two shapes, resolved by probing for a dedicated load-balancer target:
+ *  - **Fleet** (bun-style: one rpx LB box fronts N gateway-less app boxes) —
+ *    rewrite ONLY the LB's route fragment with the multi-upstream LB config
+ *    ({@link buildRpxLbConfig} + {@link buildRpxFragmentRefreshScript}).
+ *  - **Single box** — the gateway is co-located with the app, so the full
+ *    provision script runs on the app targets. Re-runnable: it rewrites the
+ *    launcher + unit and `systemctl restart`s, reloading the new routes.
  */
 export declare function reloadRpxGateway(options: DeployAllSitesOptions): Promise<boolean>;

package/dist/drivers/shared/db-provision.d.ts

@@ -6,10 +6,32 @@
  * install nothing and just wire `.env` — see {@link buildManagedDbEnv}.
  *
  * pantry services listen on TCP localhost ports (mysql/mariadb 3306, postgres
- * 5432, redis 6379, memcached 11211, meilisearch 7700); DB setup connects over
- * TCP, and the engine clients are on PATH via `pantry env`.
+ * 5432, redis 6379, memcached 11211, meilisearch 7700) and the engine clients
+ * are on PATH via `pantry env`. Admin commands (db setup, dumps, restores)
+ * connect over the engine's local unix socket — see {@link pgAdminCommand}.
  */
 import type { ComputeServicesConfig, DatabaseConfig } from '@ts-cloud/core';
+/**
+ * True when the database is co-located with the box (the managed-services
+ * engine): no host configured, or an explicit loopback host. Anything else is
+ * an external/managed database reached over TCP.
+ */
+export declare function isLocalDatabase(database: DatabaseConfig | undefined): boolean;
+/**
+ * Build the connection prefix for a postgres admin command (`psql`/`pg_dump`)
+ * run on the box.
+ *
+ * The pantry postgres pg_hba grants `trust` on the local unix socket but
+ * requires md5 password auth over TCP loopback — and the `postgres` superuser
+ * has no password — so against the co-located engine admin clients MUST use
+ * the socket: omit `-h` entirely and the pantry client uses its compiled-in
+ * default socket dir, which matches the server's by construction (verified
+ * on-box: `psql -U postgres` from root connects passwordless). Against an
+ * external/managed host, use TCP with the configured credentials
+ * (`PGPASSWORD` inline + `-w`, so a missing password fails fast instead of
+ * prompting forever).
+ */
+export declare function pgAdminCommand(database: DatabaseConfig | undefined, tool?: 'psql' | 'pg_dump'): string;
 /**
  * Build pantry install + enable/start commands for each requested on-box
  * service. Idempotent (pantry install/enable/start are no-ops when satisfied).

package/dist/drivers/shared/deploy-script.d.ts

@@ -77,6 +77,8 @@ export interface BuildSiteDeployScriptOptions {
 export declare function buildSiteDeployScript(options: BuildSiteDeployScriptOptions): string[];
 export interface BuildStaticSiteDeployScriptOptions {
     siteName: string;
+    /** Project slug — namespaces the staged tarball on shared boxes. */
+    slug?: string;
     /** How the remote host obtains the release tarball */
     artifactFetch: string[];
     /** Site base dir holding `releases/`, `current`. Default `/var/www/<site>`. */
@@ -101,5 +103,13 @@ export interface BuildStaticSiteDeployScriptOptions {
  * tlsx), which ts-cloud points at the symlink. Old releases are pruned.
  */
 export declare function buildStaticSiteDeployScript(options: BuildStaticSiteDeployScriptOptions): string[];
-export declare function buildAwsArtifactFetch(bucket: string, key: string, region: string, siteName: string): string[];
-export declare function buildLocalArtifactFetch(localPath: string, siteName: string): string[];
+/**
+ * Box-local staging path for the uploaded release tarball. Namespaced by
+ * project slug + site + release id so two projects sharing a box (or two
+ * overlapping deploys of one site) never clobber each other's tarball between
+ * the fetch and the extract — the flat `/tmp/<site>-release.tar.gz` layout
+ * cross-contaminated releases on shared boxes.
+ */
+export declare function releaseTarballTmpPath(slug: string | undefined, siteName: string, releaseId: string): string;
+export declare function buildAwsArtifactFetch(bucket: string, key: string, region: string, destPath: string): string[];
+export declare function buildLocalArtifactFetch(localPath: string, destPath: string): string[];

package/dist/drivers/shared/fleet.d.ts

@@ -12,7 +12,7 @@
  * private network, and (required) a dedicated services box so every app server
  * shares one database/cache.
  */
-import type { ComputeConfig, DatabaseConfig } from '@ts-cloud/core';
+import type { CloudConfig, ComputeConfig, DatabaseConfig } from '@ts-cloud/core';
 export type FleetRole = 'app' | 'services' | 'lb';
 export interface FleetTopology {
     /** Number of application servers. */
@@ -32,3 +32,14 @@ export declare function resolveFleetTopology(compute?: ComputeConfig): FleetTopo
  * under `site.env` (explicit values win).
  */
 export declare function buildFleetServicesEnv(servicesPrivateIp: string, database?: DatabaseConfig): Record<string, string>;
+/**
+ * Build the provision commands for a fleet's dedicated services box (DB /
+ * cache / search only — no app runtime, no gateway). Shared by the PHP fleet
+ * and the bun/node/deno fleet so the two paths can never drift: engine
+ * installs bound to the private network, the app database + user, box
+ * maintenance, the on-box notifier (so the monitoring cron can report — a
+ * no-op unless notifications are configured), and — when `compute.backups`
+ * is enabled — the nightly DB backup, which MUST run here (where the
+ * database lives), never on an app box.
+ */
+export declare function buildFleetServicesBoxProvision(config: CloudConfig): string[];

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -297,3 +297,29 @@ export declare function buildCertManagementCommands(options: BuildRpxProvisionOp
  * server-app/server-static sites appear in the gateway automatically.
  */
 export declare function buildRpxProvisionScript(options: BuildRpxProvisionOptions): string[];
+export interface BuildRpxFragmentRefreshOptions {
+    /** The gateway config this deploy resolved (single-box or LB multi-upstream). */
+    config: RpxGatewayConfig;
+    /**
+     * This project's slug — the registry fragment is rewritten at
+     * `<sites.d>/<slug>.json`, exactly as in {@link buildRpxProvisionScript}.
+     * Defaults to `'app'`.
+     */
+    slug?: string;
+}
+/**
+ * Build the shell commands that rewrite ONLY this app's rpx route fragment
+ * (`<sites.d>/<slug>.json`) and restart the gateway, so the running assembler
+ * re-merges every fragment and the new routes go live.
+ *
+ * Unlike {@link buildRpxProvisionScript} this does NOT reinstall rpx/tlsx,
+ * rewrite the assembler launcher, or touch the systemd unit — it is the cheap
+ * reload for a box whose gateway is already provisioned. That is exactly the
+ * bun-fleet load-balancer situation: the LB box is created once (cloud-init
+ * writes the fragment at first boot) but long outlives any single deploy, so
+ * its routes must be refreshed from the CURRENT sites model + CURRENT app-box
+ * upstreams on every provision/deploy — otherwise sites added later 404 and
+ * app-fleet scale changes never reach the gateway. The `systemctl restart`
+ * re-runs the stable assembler, which re-reads all of {@link RPX_SITES_DIR}.
+ */
+export declare function buildRpxFragmentRefreshScript(options: BuildRpxFragmentRefreshOptions): string[];

package/dist/drivers/shared/ssh-keys.d.ts

@@ -15,7 +15,8 @@ export interface AuthorizedKeysOptions {
 }
 /**
  * Build the commands that reconcile the managed key block in authorized_keys.
- * Strips any previous ts-cloud block, then appends the current set. Returns `[]`
- * when there are no keys to manage.
+ * Strips any previous ts-cloud block, then appends the current set. An empty
+ * key set still strips the block — removing your last key from the config must
+ * remove it from the box (e.g. revoking a compromised key).
  */
 export declare function buildAuthorizedKeysScript(keys?: SshKeyConfig[], options?: AuthorizedKeysOptions): string[];

package/dist/index.js

@@ -55,10 +55,10 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "./chunk-rr3j38qr.js";
+} from "./chunk-jgenfdz6.js";
 import {
   buildAndPushServerlessImage
-} from "./chunk-3mcfbrw8.js";
+} from "./chunk-tskj9fay.js";
 import {
   CloudWatchLogsClient,
   EFSClient,
@@ -105,7 +105,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-xdd6qvre.js";
+} from "./chunk-dah449r1.js";
 import {
   ABTestManager,
   AI,
@@ -446,6 +446,7 @@ import {
   replicaManager,
   requiresReplacement,
   resolveApp,
+  resolveAppDatabase,
   resolveCloudProvider,
   resolveCredentials,
   resolveDashboardDomain,
@@ -509,7 +510,7 @@ import {
   withSecurity,
   withTimeout,
   xrayManager
-} from "./chunk-k56wpkhg.js";
+} from "./chunk-stt1z5cx.js";
 import {
   EC2Client,
   SSMClient
@@ -4729,6 +4730,7 @@ export {
   resolveDashboardAction,
   resolveCredentials,
   resolveCloudProvider,
+  resolveAppDatabase,
   resolveApp,
   requiresReplacement,
   replicaManager,