@wtfalch/foundry 0.1.0 → 0.3.0

package/dist/store/schema.d.ts

@@ -1,3 +1,5 @@
+import type { IssuerApp } from '../org.js';
+import type { Plan } from '../plan.js';
 import type { Checkpoint } from '../state.js';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
@@ -196,6 +198,146 @@ export declare const declaredOrgs: import("drizzle-orm/pg-core").PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        hostingEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_enabled";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingUsesDomain: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_uses_domain";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingDatabase: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_database";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingTunnel: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_tunnel";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingGitBranch: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_git_branch";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingBuildPack: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_build_pack";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        hostingIssuerApps: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_issuer_apps";
+            tableName: "foundry_declared_orgs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: IssuerApp[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: IssuerApp[];
+        }>;
+        hostingAccessEmails: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_access_emails";
+            tableName: "foundry_declared_orgs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: string[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: string[];
+        }>;
         ssoEnabled: import("drizzle-orm/pg-core").PgColumn<{
             name: "sso_enabled";
             tableName: "foundry_declared_orgs";
@@ -451,6 +593,74 @@ export declare const declaredOrgs: import("drizzle-orm/pg-core").PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        ownerEmail: import("drizzle-orm/pg-core").PgColumn<{
+            name: "owner_email";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        ownerGivenName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "owner_given_name";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        ownerFamilyName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "owner_family_name";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isTest: import("drizzle-orm/pg-core").PgColumn<{
+            name: "is_test";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createdAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "created_at";
             tableName: "foundry_declared_orgs";
@@ -609,7 +819,175 @@ export declare const foundryAppliedState: import("drizzle-orm/pg-core").PgTableW
     };
     dialect: "pg";
 }>;
+/** Mirrors `migrations/0012_audit.sql`, the source of truth (#85). */
+export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_audit_events";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "foundry_audit_events";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        at: import("drizzle-orm/pg-core").PgColumn<{
+            name: "at";
+            tableName: "foundry_audit_events";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        kind: import("drizzle-orm/pg-core").PgColumn<{
+            name: "kind";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: "plan" | "apply" | "destroy";
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: "plan" | "apply" | "destroy";
+        }>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorDisplay: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_display";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        outcome: import("drizzle-orm/pg-core").PgColumn<{
+            name: "outcome";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: "applied" | "refused" | "failed" | "destroyed";
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: "applied" | "refused" | "failed" | "destroyed";
+        }>;
+        reason: import("drizzle-orm/pg-core").PgColumn<{
+            name: "reason";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        plan: import("drizzle-orm/pg-core").PgColumn<{
+            name: "plan";
+            tableName: "foundry_audit_events";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Plan;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Plan;
+        }>;
+    };
+    dialect: "pg";
+}>;
 export type DeclaredOrgRow = typeof declaredOrgs.$inferSelect;
 export type NewDeclaredOrgRow = typeof declaredOrgs.$inferInsert;
 export type AppliedStateRow = typeof foundryAppliedState.$inferSelect;
 export type NewAppliedStateRow = typeof foundryAppliedState.$inferInsert;
+export type AuditEventRow = typeof foundryAuditEvents.$inferSelect;

package/dist/store/schema.js

@@ -1,4 +1,4 @@
-import { boolean, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
+import { bigserial, boolean, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
  * the SQL carries the CHECKs drizzle-kit does not generate here (this
@@ -18,6 +18,15 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     // SiteConfig (org.ts, T10). A brand new org has no cms site.
     siteEnabled: boolean('site_enabled').notNull().default(false),
     siteUsesDomain: boolean('site_uses_domain').notNull().default(false),
+    // HostingConfig (org.ts, #71). A brand new org has no hosted app.
+    hostingEnabled: boolean('hosting_enabled').notNull().default(false),
+    hostingUsesDomain: boolean('hosting_uses_domain').notNull().default(false),
+    hostingDatabase: boolean('hosting_database').notNull().default(false),
+    hostingTunnel: boolean('hosting_tunnel').notNull().default(false),
+    hostingGitBranch: text('hosting_git_branch').notNull().default('main'),
+    hostingBuildPack: text('hosting_build_pack').notNull().default('nixpacks'),
+    hostingIssuerApps: jsonb('hosting_issuer_apps').notNull().default([]).$type(),
+    hostingAccessEmails: jsonb('hosting_access_emails').notNull().default([]).$type(),
     ssoEnabled: boolean('sso_enabled').notNull().default(false),
     guestsEnabled: boolean('guests_enabled').notNull().default(false),
     soloEnabled: boolean('solo_enabled').notNull().default(false),
@@ -40,6 +49,16 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     vatRegistered: boolean('vat_registered'),
     bespokeAppRepo: text('bespoke_app_repo'),
     adoptedAppForm: text('adopted_app_form'),
+    // OwnerIdentity (org.ts): the org's owner, invited by ZITADEL email. All
+    // three nullable -- a brand new org has none of them, reassembled as one
+    // object only once all three are non-null (same shape as BuyerIdentity's
+    // own contact fields above).
+    ownerEmail: text('owner_email'),
+    ownerGivenName: text('owner_given_name'),
+    ownerFamilyName: text('owner_family_name'),
+    // `test: boolean` (org.ts): only a test org can be destroyed. A brand new
+    // org defaults to real (false).
+    isTest: boolean('is_test').notNull().default(false),
     createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
 });
@@ -57,3 +76,15 @@ export const foundryAppliedState = pgTable('foundry_applied_state', {
     lastAppliedAt: timestamp('last_applied_at', { withTimezone: true }),
     lastAppliedDeclaredOrgVersion: text('last_applied_declared_org_version'),
 });
+/** Mirrors `migrations/0012_audit.sql`, the source of truth (#85). */
+export const foundryAuditEvents = pgTable('foundry_audit_events', {
+    id: bigserial('id', { mode: 'number' }).primaryKey(),
+    at: timestamp('at', { withTimezone: true }).notNull(),
+    kind: text('kind').notNull().$type(),
+    actorId: text('actor_id').notNull(),
+    actorDisplay: text('actor_display').notNull(),
+    orgId: text('org_id').notNull(),
+    outcome: text('outcome').$type(),
+    reason: text('reason'),
+    plan: jsonb('plan').$type(),
+});

package/dist/store.d.ts

@@ -12,6 +12,8 @@ import type { AppliedState } from './state.js';
 export interface DeclaredOrgStore {
     create(org: DeclaredOrg): Promise<void>;
     get(id: OrgId): Promise<DeclaredOrg | null>;
+    /** Whether any org already holds this slug. `slugFromName` asks it. */
+    slugTaken(slug: string): Promise<boolean>;
     /**
      * Combinations foundry knows are impossible are rejected with a reason
      * (#18 "Done when"), so a caller must be ready for this to throw rather
@@ -20,4 +22,14 @@ export interface DeclaredOrgStore {
     update(id: OrgId, patch: Partial<DeclaredOrg>): Promise<DeclaredOrg>;
     getAppliedState(id: OrgId): Promise<AppliedState | null>;
     putAppliedState(state: AppliedState): Promise<void>;
+    /**
+     * Removes the declared org and its applied state together. Called only by
+     * `FoundryPlanApply.destroy` (`plan/plan-apply.ts`), once every resource it
+     * recorded for this org has already been deleted from Coolify, Cloudflare
+     * and ZITADEL -- this is the last step, not the first. Idempotent: deleting
+     * an id that does not exist (or no longer has applied state) is a no-op,
+     * not an error, so a retried destroy that reaches this step twice never
+     * throws.
+     */
+    delete(id: OrgId): Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",
@@ -9,9 +9,7 @@
   },
   "license": "MIT",
   "type": "module",
-  "files": [
-    "dist"
-  ],
+  "files": ["dist"],
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -27,11 +25,22 @@
   "engines": {
     "node": ">=22.0.0"
   },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && mkdir -p dist/migrations && find src/migrations -maxdepth 1 -name '*.sql' -exec cp {} dist/migrations/ \\;",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "db:provision": "node scripts/foundry-db-provision.mjs",
+    "db:migrate": "node scripts/foundry-db-migrate.mjs",
+    "calls-sfu:deploy": "node scripts/calls-sfu-deploy.mjs"
+  },
   "peerDependencies": {
     "drizzle-orm": ">=0.45.2"
   },
   "dependencies": {
-    "@wtfalch/providers": "0.1.0"
+    "@wtfalch/auth": "0.16.0",
+    "@wtfalch/email": "0.15.0",
+    "@wtfalch/providers": "0.5.0",
+    "ssh2": "1.17.0"
   },
   "devDependencies": {
     "@electric-sql/pglite": "^0.5.8",
@@ -40,10 +49,5 @@
     "postgres": "3.4.9",
     "typescript": "^5.9.0",
     "vitest": "^4.1.6"
-  },
-  "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && mkdir -p dist/migrations && find src/migrations -maxdepth 1 -name '*.sql' -exec cp {} dist/migrations/ \\;",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run"
   }
-}
+}