@wtfalch/foundry 0.16.1 → 0.16.3

package/dist/plan/chat-matrix.d.ts

@@ -26,9 +26,9 @@ export declare const mintChatMatrixSecrets: typeof mintCallsMatrixSecrets;
 /** The chat repo: the Synapse module and the chat service are both built from it. */
 export declare const CHAT_REPO = "wtfalch/chat";
 /** Synapse plus the `wtfalch_chat_gate` module; built from the repo root. */
-export declare const CHAT_SYNAPSE_DOCKERFILE = "apps/chat-service/synapse-module/Dockerfile";
+export declare const CHAT_SYNAPSE_DOCKERFILE = "/apps/chat-service/synapse-module/Dockerfile";
 /** The chat service, built from the repo root (that Dockerfile's own top comment). */
-export declare const CHAT_SERVICE_DOCKERFILE = "apps/chat-service/Dockerfile";
+export declare const CHAT_SERVICE_DOCKERFILE = "/apps/chat-service/Dockerfile";
 export declare const CHAT_SYNAPSE_PORT = "8008";
 export declare const CHAT_MAS_PORT = "8080";
 export declare const CHAT_SERVICE_PORT = "8080";

package/dist/plan/chat-matrix.js

@@ -3,9 +3,9 @@ export const mintChatMatrixSecrets = mintCallsMatrixSecrets;
 /** The chat repo: the Synapse module and the chat service are both built from it. */
 export const CHAT_REPO = 'wtfalch/chat';
 /** Synapse plus the `wtfalch_chat_gate` module; built from the repo root. */
-export const CHAT_SYNAPSE_DOCKERFILE = 'apps/chat-service/synapse-module/Dockerfile';
+export const CHAT_SYNAPSE_DOCKERFILE = '/apps/chat-service/synapse-module/Dockerfile';
 /** The chat service, built from the repo root (that Dockerfile's own top comment). */
-export const CHAT_SERVICE_DOCKERFILE = 'apps/chat-service/Dockerfile';
+export const CHAT_SERVICE_DOCKERFILE = '/apps/chat-service/Dockerfile';
 export const CHAT_SYNAPSE_PORT = '8008';
 export const CHAT_MAS_PORT = '8080';
 export const CHAT_SERVICE_PORT = '8080';

package/dist/plan/executor.d.ts

@@ -142,6 +142,7 @@ export interface CoolifyPort {
     getDatabase(uuid: string): Promise<{
         uuid: string;
         internal_db_url?: string;
+        status?: string;
     }>;
     /**
      * Every database Coolify holds. `coolifyDatabase` finds its own by name and
@@ -1357,6 +1358,25 @@ export declare const ACCESS_POLICY_NAME = "foundry: allowed emails";
  * uses for the org's own app.
  */
 export declare function isRunningOrStarting(status: string | undefined): boolean;
+/**
+ * Reads a Postgres database and starts it when Coolify reports it as not
+ * running. `createPostgresDatabase` does not start what it creates (no
+ * `instant_deploy`), and a database found by name or by recorded id may have
+ * been left stopped, so every site that points an app at a database calls this
+ * instead of `getDatabase`. Returns what `getDatabase` returned.
+ */
+export declare function getDatabaseStarted(coolify: {
+    getDatabase(uuid: string): Promise<{
+        uuid: string;
+        internal_db_url?: string;
+        status?: string;
+    }>;
+    raw(method: string, path: string, body?: unknown): Promise<unknown>;
+}, dbId: string): Promise<{
+    uuid: string;
+    internal_db_url?: string;
+    status?: string;
+}>;
 export declare class FoundryStepExecutor implements StepExecutor, StepDestroyer {
     private readonly ports;
     constructor(ports: FoundryStepExecutorPorts);

package/dist/plan/executor.js

@@ -193,7 +193,7 @@ const RATE_LIMIT_REQUESTS_PER_PERIOD = 10;
  * multiple-apps shape `cmsSite`/`CMS_APP_DOCKERFILE` already use below.
  */
 const DEFAULT_APP_REPO = 'wtfalch/foundry';
-const DEFAULT_APP_DOCKERFILE = 'apps/hestia/Dockerfile';
+const DEFAULT_APP_DOCKERFILE = '/apps/hestia/Dockerfile';
 /**
  * The one repo `cmsSite` builds both of its apps from
  * (https://github.com/wtfalch/cms) -- the 2026-09-25 decision this campaign
@@ -205,8 +205,8 @@ const DEFAULT_APP_DOCKERFILE = 'apps/hestia/Dockerfile';
  * is `apps/site`'s own Dockerfile (the reference renderer).
  */
 const CMS_REPO = 'wtfalch/cms';
-const CMS_APP_DOCKERFILE = 'Dockerfile';
-const CMS_SITE_APP_DOCKERFILE = 'apps/site/Dockerfile';
+const CMS_APP_DOCKERFILE = '/Dockerfile';
+const CMS_SITE_APP_DOCKERFILE = '/apps/site/Dockerfile';
 /**
  * #164: the repo `coolifyAgora` builds the org's Agora from
  * (https://github.com/wtfalch/agora) -- the issue's own "How" names this
@@ -225,7 +225,7 @@ const CMS_SITE_APP_DOCKERFILE = 'apps/site/Dockerfile';
  * way it does for `cmsSite`'s two apps above.
  */
 const AGORA_REPO = 'wtfalch/agora';
-const AGORA_APP_DOCKERFILE = 'apps/agora/Dockerfile';
+const AGORA_APP_DOCKERFILE = '/apps/agora/Dockerfile';
 /**
  * Every app foundry deploys keeps its own logs across a redeploy, so a
  * database outage does not also erase the only other copy of the evidence
@@ -534,7 +534,7 @@ const CALLS_SERVICE_DB_SCOPE_KEY = 'coolify_calls_service_database';
 /** `wtfalch/calls`'s own repo -- `coolifyCallsService` deploys its `packages/service` (#145, part 2 of #128). */
 const CALLS_SERVICE_REPO = 'wtfalch/calls';
 /** `packages/service/Dockerfile`, built from the repo root (that Dockerfile's own top comment). */
-const CALLS_SERVICE_DOCKERFILE = 'packages/service/Dockerfile';
+const CALLS_SERVICE_DOCKERFILE = '/packages/service/Dockerfile';
 /**
  * Whether an application's own Coolify `status` (`` `running:healthy`,
  * `exited:unhealthy` `` -- `@wtfalch/providers`' own doc comment) means it is
@@ -551,6 +551,20 @@ export function isRunningOrStarting(status) {
         return true;
     return !status.startsWith('exited') && !status.startsWith('stopped');
 }
+/**
+ * Reads a Postgres database and starts it when Coolify reports it as not
+ * running. `createPostgresDatabase` does not start what it creates (no
+ * `instant_deploy`), and a database found by name or by recorded id may have
+ * been left stopped, so every site that points an app at a database calls this
+ * instead of `getDatabase`. Returns what `getDatabase` returned.
+ */
+export async function getDatabaseStarted(coolify, dbId) {
+    const db = await coolify.getDatabase(dbId);
+    if (db.status !== undefined && !db.status.startsWith('running')) {
+        await coolify.raw('POST', `/databases/${dbId}/start`);
+    }
+    return db;
+}
 // ---------------------------------------------------------------------------
 // Executor
 // ---------------------------------------------------------------------------
@@ -1442,7 +1456,7 @@ export class FoundryStepExecutor {
      * never logged, never interpolated into a thrown error.
      */
     async pushDatabaseUrl(appId, dbId, dbName) {
-        const db = await this.ports.coolify.getDatabase(dbId);
+        const db = await getDatabaseStarted(this.ports.coolify, dbId);
         // Nothing to push; `planApp` reports this as blocked from the live reader.
         if (!db.internal_db_url)
             return { pushed: false, changed: false };
@@ -2027,7 +2041,7 @@ export class FoundryStepExecutor {
         // recorded, logged, or interpolated into a thrown error. Its own call,
         // separate from the two app-env calls above, since it has nothing to
         // push once `internal_db_url` is absent.
-        const db = await this.ports.coolify.getDatabase(dbId);
+        const db = await getDatabaseStarted(this.ports.coolify, dbId);
         if (db.internal_db_url) {
             const dbEnvs = [
                 { key: 'DATABASE_URL_OWNER', value: db.internal_db_url },
@@ -2224,8 +2238,8 @@ export class FoundryStepExecutor {
         const masDbId = await this.ensureCallsDatabase(context, projectUuid, environment, names.masDb, 'mas', CALLS_MAS_DB_SCOPE_KEY);
         context.recordScopeId(CALLS_MAS_DB_SCOPE_KEY, masDbId);
         const [synapseDbRow, masDbRow] = await Promise.all([
-            this.ports.coolify.getDatabase(synapseDbId),
-            this.ports.coolify.getDatabase(masDbId),
+            getDatabaseStarted(this.ports.coolify, synapseDbId),
+            getDatabaseStarted(this.ports.coolify, masDbId),
         ]);
         const synapseDb = synapseDbRow.internal_db_url
             ? parseCallsDbUrl(synapseDbRow.internal_db_url)
@@ -2517,9 +2531,9 @@ export class FoundryStepExecutor {
         const serviceDbId = await this.ensureCallsDatabase(context, projectUuid, environment, names.serviceDb, 'chat', CHAT_SERVICE_DB_SCOPE_KEY);
         context.recordScopeId(CHAT_SERVICE_DB_SCOPE_KEY, serviceDbId);
         const [synapseDbRow, masDbRow, serviceDbRow] = await Promise.all([
-            this.ports.coolify.getDatabase(synapseDbId),
-            this.ports.coolify.getDatabase(masDbId),
-            this.ports.coolify.getDatabase(serviceDbId),
+            getDatabaseStarted(this.ports.coolify, synapseDbId),
+            getDatabaseStarted(this.ports.coolify, masDbId),
+            getDatabaseStarted(this.ports.coolify, serviceDbId),
         ]);
         const synapseDb = synapseDbRow.internal_db_url
             ? parseCallsDbUrl(synapseDbRow.internal_db_url)
@@ -2692,7 +2706,7 @@ export class FoundryStepExecutor {
         const dbName = `${name}-db`;
         const dbId = await this.ensureCallsDatabase(context, projectUuid, environment, dbName, dbName.replace(/-/g, '_'), CALLS_SERVICE_DB_SCOPE_KEY);
         context.recordScopeId(CALLS_SERVICE_DB_SCOPE_KEY, dbId);
-        const db = await this.ports.coolify.getDatabase(dbId);
+        const db = await getDatabaseStarted(this.ports.coolify, dbId);
         if (!db.internal_db_url) {
             throw new Error(`coolify:calls-service for ${org.slug}: its database has no internal_db_url yet -- retry this apply once Coolify reports one`);
         }

package/dist/plan/platform-providers.d.ts

@@ -51,7 +51,7 @@ export declare const JOBS_ADMIN_TOKEN_REF = "jobs:scheduler:adminToken";
  * org's own app, reused here for the platform's one scheduler instead of once
  * per org.
  */
-type JobsCoolifyPort = Pick<CoolifyPort, 'findProjectByName' | 'createProject' | 'findOrCreateEnvironment' | 'listServers' | 'requireGithubApp' | 'findApplicationByName' | 'createGithubAppApplication' | 'listDatabases' | 'createPostgresDatabase' | 'getDatabase' | 'bulkUpsertEnvs' | 'getApplication' | 'deploy'>;
+type JobsCoolifyPort = Pick<CoolifyPort, 'findProjectByName' | 'createProject' | 'findOrCreateEnvironment' | 'listServers' | 'requireGithubApp' | 'findApplicationByName' | 'createGithubAppApplication' | 'listDatabases' | 'createPostgresDatabase' | 'getDatabase' | 'raw' | 'bulkUpsertEnvs' | 'getApplication' | 'deploy'>;
 /**
  * Options for {@link FoundryPlatformStepExecutor}'s constructor, replacing
  * four positional arguments that shifted on every merge that added a
@@ -340,7 +340,7 @@ export interface PlatformMailRuntime {
  * {@link PlatformStepExecutionContext}, bundled like {@link PlatformAuthDeps}.
  */
 export interface PlatformArchonDeps {
-    coolify: Pick<CoolifyPort, 'findProjectByName' | 'createProject' | 'findOrCreateEnvironment' | 'listServers' | 'findApplicationByName' | 'getApplication' | 'requireGithubApp' | 'createGithubAppApplication' | 'createDockerfileApplication' | 'listDatabases' | 'createPostgresDatabase' | 'getDatabase' | 'bulkUpsertEnvs' | 'listEnvs' | 'updateApplication' | 'deploy'>;
+    coolify: Pick<CoolifyPort, 'findProjectByName' | 'createProject' | 'findOrCreateEnvironment' | 'listServers' | 'findApplicationByName' | 'getApplication' | 'requireGithubApp' | 'createGithubAppApplication' | 'createDockerfileApplication' | 'listDatabases' | 'createPostgresDatabase' | 'getDatabase' | 'raw' | 'bulkUpsertEnvs' | 'listEnvs' | 'updateApplication' | 'deploy'>;
     cloudflare: Pick<CloudflarePort, 'findZoneByApex' | 'findTunnelByName' | 'createTunnel' | 'putTunnelConfig' | 'getTunnelToken' | 'findDnsRecord' | 'createDnsRecord' | 'updateDnsRecord' | 'listAccessApps' | 'createAccessApp' | 'listAccessPolicies' | 'createAccessPolicy' | 'deleteAccessApp'>;
     /** Must target the platform's own ZITADEL instance, or `zitadelForInstance` must be set. */
     zitadel: Pick<ZitadelPort, 'findOrCreateOrg' | 'findOrCreateProject' | 'createOidcApp' | 'listApps' | 'deleteApp'>;

package/dist/plan/platform-providers.js

@@ -4,7 +4,7 @@ import { applyObjects, openInstance, platformMailSettingsObjects } from '@wtfalc
 import { VERSIONS, floatingTagBlocked } from '../bootstrap/versions.js';
 import { redactSecrets } from '../calls-sfu-deploy-support.js';
 import { ensureCloudflaredConnector } from './cloudflared-connector.js';
-import { ACCESS_POLICY_NAME, isNotFoundError, isRunningOrStarting } from './executor.js';
+import { ACCESS_POLICY_NAME, getDatabaseStarted, isNotFoundError, isRunningOrStarting, } from './executor.js';
 import { coolifyDomains } from './hostnames.js';
 import { JOBS_SCHEDULER_KEY, PLATFORM_AI_APPLIED_GITREF_SCOPE_KEY, PLATFORM_AI_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_AI_DEPLOY_PENDING_SCOPE_KEY, PLATFORM_AI_INTERNAL_URL_SCOPE_KEY, PLATFORM_AI_KEY, PLATFORM_AI_MANAGEMENT_KEY_CONFLICT_SCOPE_KEY, PLATFORM_AI_MANAGEMENT_KEY_SCOPE_KEY, PLATFORM_AI_MANAGEMENT_KEY_UNDELIVERED_SCOPE_KEY, PLATFORM_AI_MIGRATE_BLOCKED_SCOPE_KEY, PLATFORM_AI_ORGANISATION_SCOPE_KEY, PLATFORM_AI_SIGNING_KEY_SET_SCOPE_KEY, PLATFORM_AI_SIGNING_KEY_UNDELIVERED_SCOPE_KEY, PLATFORM_ARCHON_APPLIED_BROKER_SCOPE_KEY, PLATFORM_ARCHON_APPLIED_GIT_REF_SCOPE_KEY, PLATFORM_ARCHON_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_ARCHON_CONNECTOR_APP_SCOPE_KEY, PLATFORM_ARCHON_GATE_CLOSED_SCOPE_KEY, PLATFORM_ARCHON_KEY, PLATFORM_ARCHON_MASTER_CLOUDFLARE_TOKEN_REF, PLATFORM_ARCHON_MASTER_COOLIFY_TOKEN_REF, PLATFORM_ARCHON_MASTER_COOLIFY_URL_REF, PLATFORM_AUTH_ADMIN_UNDELIVERED_SCOPE_KEY, PLATFORM_AUTH_ADMIN_USER_SCOPE_KEY, PLATFORM_AUTH_BROKER_DEPLOYED_SCOPE_KEY, PLATFORM_AUTH_BROKER_SCOPE_KEY, PLATFORM_AUTH_CONNECTOR_APP_SCOPE_KEY, PLATFORM_AUTH_INSTANCE_SCOPE_KEY, PLATFORM_AUTH_INSTANCE_UNDELIVERED_SCOPE_KEY, PLATFORM_AUTH_KEY, PLATFORM_AUTH_LOGIN_CLIENT_UNDELIVERED_SCOPE_KEY, PLATFORM_AUTH_LOGIN_CLIENT_USER_SCOPE_KEY, PLATFORM_AUTH_ZITADEL_APPLIED_IMAGE_TAG_SCOPE_KEY, PLATFORM_BACKUP_DATABASE_SCOPE_KEYS, PLATFORM_BACKUP_SERVICE_KEYS, PLATFORM_FILES_APPLIED_GIT_REF_SCOPE_KEY, PLATFORM_FILES_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_FILES_INTERNAL_URL_SCOPE_KEY, PLATFORM_FILES_INTROSPECTION_SCOPE_KEY, PLATFORM_FILES_INTROSPECTION_UNDELIVERED_SCOPE_KEY, PLATFORM_FILES_KEY, PLATFORM_FILES_MANAGEMENT_KEY_SCOPE_KEY, PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY, PLATFORM_FILES_ZITADEL_PROJECT_SCOPE_KEY, PLATFORM_INTEGRATIONS_APPLIED_GITREF_SCOPE_KEY, PLATFORM_INTEGRATIONS_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_INTEGRATIONS_KEY, PLATFORM_INTEGRATIONS_KEY_SET_SCOPE_KEY, PLATFORM_INTEGRATIONS_KEY_UNDELIVERED_SCOPE_KEY, PLATFORM_MAIL_ADMIN_KEY_SCOPE_KEY, PLATFORM_MAIL_ADMIN_UNDELIVERED_SCOPE_KEY, PLATFORM_MAIL_APPLIED_GIT_REF_SCOPE_KEY, PLATFORM_MAIL_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_MAIL_CONNECTOR_APP_SCOPE_KEY, PLATFORM_MAIL_INTERNAL_URL_SCOPE_KEY, PLATFORM_MAIL_KEY, PLATFORM_MAIL_ZITADEL_PROJECT_SCOPE_KEY, parseBrokerDeployRecord, parseLoginClientRecord, platformMailMxHost, } from './platform-diff.js';
 import { applyCallsSfuPlatformStep } from './platform-sfu.js';
@@ -429,7 +429,7 @@ export class FoundryPlatformStepExecutor {
             });
             appId = created.uuid;
         }
-        const db = await coolify.getDatabase(dbId);
+        const db = await getDatabaseStarted(coolify, dbId);
         if (!db.internal_db_url) {
             throw new Error(`platform step coolify:jobs: database ${dbId} has no internal_db_url yet; not deploying the scheduler without a database`);
         }
@@ -497,9 +497,9 @@ const AUTH_ZITADEL_IMAGE = 'ghcr.io/zitadel/zitadel';
 const AUTH_ZITADEL_IMAGE_TAG = VERSIONS.zitadel;
 /** `wtfalch/auth`'s own `login/Dockerfile` -- `docs/deploy.md`'s "One compose service, four containers... Two images are built from this repository: the proxy... and the login". */
 const AUTH_REPO = 'wtfalch/auth';
-const AUTH_LOGIN_DOCKERFILE = 'login/Dockerfile';
+const AUTH_LOGIN_DOCKERFILE = '/login/Dockerfile';
 /** `wtfalch/auth`'s own `broker/Dockerfile` -- built from the repo root so the workspace resolves (#204). */
-const AUTH_BROKER_DOCKERFILE = 'broker/Dockerfile';
+const AUTH_BROKER_DOCKERFILE = '/broker/Dockerfile';
 /**
  * `wtfalch/auth`'s login app answers on 3000 (its `Dockerfile`'s Next.js
  * default); ZITADEL answers on 8080 -- both fixed by `docker-compose.yml`'s
@@ -852,7 +852,7 @@ async function provisionPlatformAuth(context, deps) {
         dbId = created.uuid;
         await record(PLATFORM_AUTH_DB_SCOPE_KEY, dbId);
     }
-    const db = await deps.coolify.getDatabase(dbId);
+    const db = await getDatabaseStarted(deps.coolify, dbId);
     if (!db.internal_db_url) {
         // Static config check before either app is touched (`diff.ts`'s
         // `coolifyCalls` follows the same rule for its own databases): Coolify
@@ -2108,7 +2108,7 @@ async function provisionPlatformArchon(context, deps) {
         }
         await record(PLATFORM_ARCHON_DB_SCOPE_KEY, dbId);
     }
-    const db = await deps.coolify.getDatabase(dbId);
+    const db = await getDatabaseStarted(deps.coolify, dbId);
     if (!db.internal_db_url) {
         throw new Error('coolify:app for the platform (archon): the database has no internal_db_url yet -- retry this apply once Coolify reports one');
     }
@@ -3264,7 +3264,7 @@ async function provisionPlatformAi(context, deps) {
         }
         await record(PLATFORM_AI_DB_SCOPE_KEY, dbId);
     }
-    const db = await coolify.getDatabase(dbId);
+    const db = await getDatabaseStarted(coolify, dbId);
     if (!db.internal_db_url) {
         throw new Error('coolify:app for the platform (ai): the database has no internal_db_url yet -- retry this apply once Coolify reports one');
     }
@@ -3987,7 +3987,7 @@ async function provisionPlatformFiles(context, deps) {
         }
         await record(PLATFORM_FILES_DB_SCOPE_KEY, dbId);
     }
-    const db = await deps.coolify.getDatabase(dbId);
+    const db = await getDatabaseStarted(deps.coolify, dbId);
     if (!db.internal_db_url) {
         throw new Error('coolify:app for the platform (files): the database has no internal_db_url yet -- retry this apply once Coolify reports one');
     }
@@ -4346,7 +4346,7 @@ async function provisionPlatformIntegrations(action, context, deps) {
         }
         await record(INTEGRATIONS_DATABASE_SCOPE_KEY, dbId);
     }
-    const db = await coolify.getDatabase(dbId);
+    const db = await getDatabaseStarted(coolify, dbId);
     if (!db.internal_db_url) {
         throw new Error(`platform:integrations: database ${dbId} has no internal_db_url yet; not deploying the integrations host without a database`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.16.1",
+  "version": "0.16.3",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",