@fabrika/provider-zerops 0.0.13 → 0.0.15

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fabrika/provider-zerops",
-	"version": "0.0.13",
+	"version": "0.0.15",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -32,9 +32,9 @@
 		"gen:schema": "bun scripts/generate-zerops-types.ts"
 	},
 	"dependencies": {
-		"@fabrika/auth": "^0.0.13",
-		"@fabrika/auth-core": "^0.0.13",
-		"@fabrika/provider-contract": "^0.0.13",
-		"@fabrika/proxy-contract": "^0.0.13"
+		"@fabrika/auth": "^0.0.15",
+		"@fabrika/auth-core": "^0.0.15",
+		"@fabrika/provider-contract": "^0.0.15",
+		"@fabrika/proxy-contract": "^0.0.15"
 	}
 }

package/src/control.ts

@@ -440,6 +440,19 @@ export const createZeropsControlProvider = (options: ZeropsControlProviderOption
 	const controlProvider: ZeropsControlProvider = {
 		id: 'zerops',
 		normalizeRegistration,
+		/**
+		 * A Zerops artifact IS the compiled manifest, so the declaration is right here and core can refuse
+		 * a variable this app would never read. An artifact that will not decode answers `undefined`
+		 * rather than an empty set: a broken envelope is a registration problem, and reporting it as an
+		 * undeclared variable would point the operator at the wrong thing.
+		 */
+		declaredVariables: ({ artifact }) => {
+			try {
+				return parseFabrikaManifest(decodeEnvelope('artifact', artifact, zeropsArtifactCodec)).app.pipeline.vars
+			} catch {
+				return undefined
+			}
+		},
 		resolveSource: (input) => resolveSource(input),
 		resolveSourceWithBinding: (input) => resolveSource(input, input.sourceBinding),
 		deploy: async (input: ProviderDeployInput): Promise<ProviderTerminalOutcome> => {

package/src/index.ts

@@ -69,8 +69,8 @@ export {
 	compileZeropsNamespaceTopology,
 	createZeropsNamespaceCapabilities,
 	createZeropsNamespaceOperator,
+	ZEROPS_NAMESPACE_IAM_ISSUER_VARIABLE,
 	ZEROPS_NAMESPACE_IAM_KEY_VARIABLE,
-	ZEROPS_NAMESPACE_IAM_URL_VARIABLE,
 	ZEROPS_NAMESPACE_POSTGRES_HOSTNAME,
 	ZEROPS_NAMESPACE_PROXY_HOSTNAME,
 	ZEROPS_SHARED_POSTGRES_CONNECTION_STRING,

package/src/namespace.ts

@@ -31,7 +31,7 @@ import type { ZeropsServiceSpec, ZeropsSourceTarget } from './types'
 
 export const ZEROPS_NAMESPACE_PROXY_HOSTNAME = 'proxy'
 export const ZEROPS_NAMESPACE_POSTGRES_HOSTNAME = 'postgres'
-export const ZEROPS_NAMESPACE_IAM_URL_VARIABLE = 'FABRIKA_IAM_URL'
+export const ZEROPS_NAMESPACE_IAM_ISSUER_VARIABLE = 'FABRIKA_IAM_ISSUER'
 export const ZEROPS_NAMESPACE_IAM_KEY_VARIABLE = 'FABRIKA_IAM_KEY'
 /**
  * How an app reaches the namespace-owned PostgreSQL service — port, database and TLS mode NAMED, not
@@ -759,11 +759,11 @@ const ensureProxyConfiguration = async (
 		})
 		deployRequired = true
 	}
-	const iamUrl = byKey.get(ZEROPS_NAMESPACE_IAM_URL_VARIABLE)
+	const iamUrl = byKey.get(ZEROPS_NAMESPACE_IAM_ISSUER_VARIABLE)
 	if (iamUrl?.content !== options.iamUrl) {
 		await options.api.putServiceEnv({
 			serviceId: proxyServiceId,
-			key: ZEROPS_NAMESPACE_IAM_URL_VARIABLE,
+			key: ZEROPS_NAMESPACE_IAM_ISSUER_VARIABLE,
 			value: options.iamUrl,
 			signal,
 		})

package/src/provider.ts

@@ -152,9 +152,21 @@ const cancelSourceBestEffort = async (env: StepEnv, source: ZeropsRuntimeSource,
 	sourceController.abort()
 }
 
+/**
+ * Drop a version that was created and never handed to the platform.
+ *
+ * BEST EFFORT ON PURPOSE. Every caller runs this while already failing, so a cleanup that throws would
+ * replace the reason the deploy failed with the reason the cleanup did — which is what happened live,
+ * where a real `trigger-deploy` failure surfaced as `delete app-version failed (400)` and the cause was
+ * gone. The leftover version is visible on the platform; the lost diagnosis was not.
+ */
 const cleanupPreTriggerVersion = async (env: StepEnv, source: ZeropsRuntimeSource, appVersionId: string): Promise<void> => {
 	await cancelSourceBestEffort(env, source, appVersionId)
-	await env.zerops.api.deleteAppVersion({ appVersionId, signal: AbortSignal.timeout(5000) })
+	try {
+		await env.zerops.api.deleteAppVersion({ appVersionId, signal: AbortSignal.timeout(5000) })
+	} catch (error) {
+		env.log(`  [warn] app-version ${appVersionId} was left behind: ${error instanceof Error ? error.message : 'unknown error'}`)
+	}
 }
 
 /**