@ts-cloud/core 0.16.69 → 0.16.71

package/dist/types.d.ts

@@ -52,6 +52,11 @@ export interface CloudProviderConfig {
      * @see https://github.com/stacksjs/ts-cloud/issues/169
      */
     attachTo?: string;
+    /** Require fresh provider evidence for the attached Hetzner host before deploying data-bearing services. */
+    residency?: {
+        countries: string[];
+        locations?: string[];
+    };
     /**
      * Preview deployments: a pull request deployed as its own tenant on this
      * project's box at `<name>.<domain>` (Stacks' `buddy deploy:preview`).
@@ -1259,6 +1264,12 @@ export interface SiteConfig {
      * Example: 'bun run server.ts'
      */
     start?: string;
+    /**
+     * Stacks scheduler and queue Bun executable, relative to the active release.
+     * Example: pantry/bun.sh/v1.4.4/bin/bun. No global fallback when selected.
+     * Omit to retain the host runtime. This does not change the main start command.
+     */
+    backgroundBun?: string;
     /**
      * Port the SSR app listens on. Required when `start` is set.
      * Two SSR sites on the same EC2 instance must use different ports.
@@ -1269,6 +1280,8 @@ export interface SiteConfig {
      * (`/var/www/<site>/.env`). Available as process.env.* inside the running app.
      */
     env?: Record<string, string>;
+    /** False ships only this site's explicit env; deployment/provider credentials stay on the deployer. */
+    inheritEnv?: boolean;
     /**
      * SSR only. Commands run on the server inside the app directory after the
      * release tarball is extracted and the `.env` is written, but before the
@@ -1487,8 +1500,8 @@ export interface SiteConfig {
     /** `from` path/host → `to` URL redirects emitted into the nginx vhost. */
     redirects?: Record<string, string>;
     /**
-     * Give this site a dedicated php-fpm pool (isolated user/process) rather than
-     * sharing the default pool (Forge's "User Isolation").
+     * Give PHP a dedicated php-fpm pool. Runtime server apps use a project-scoped
+     * unprivileged Unix identity for the app, scheduler, queue workers and daemons.
      */
     isolation?: boolean;
     /** Per-site nginx access control (IP allow/deny — Forge "Security Rules"). */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ts-cloud/core",
   "type": "module",
-  "version": "0.16.69",
+  "version": "0.16.71",
   "description": "Core CloudFormation generation library for ts-cloud",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.16.69"
+    "@ts-cloud/aws-types": "0.16.71"
   },
   "devDependencies": {
     "typescript": "^7.0.2"