@wtfalch/foundry 0.16.16 → 0.17.0

package/dist/store/postgres.js

@@ -1,11 +1,31 @@
 import { and, asc, desc, eq, sql } from 'drizzle-orm';
-import { APP_ENTRY_KEY, DEFAULT_MAIL_APPS, DEFAULT_NO_REPLY_LOCAL_PART, validateBuyerIdentity, validateDomain, validateHosting, validateMail, validateOwners, validateSite, } from '../org.js';
+import { APP_ENTRY_KEY, DEFAULT_MAIL_APPS, DEFAULT_NO_REPLY_LOCAL_PART, validateBuyerIdentity, validateCalls, validateDomain, validateHosting, validateMail, validateOwners, validateSite, } from '../org.js';
 import { lockedHostnames } from '../plan/locked-hostnames.js';
 import { validatePlatform } from '../platform.js';
 import { RequestedChangeError, classifyChange } from '../requested-changes.js';
 import { validateSlug } from '../slug.js';
-import { declaredOrgs, foundryAppliedState, foundryAppliedVersions, foundryDeclaredPlatform, foundryRequestedChanges, } from './schema.js';
+import { StaleLeaseError, } from '../store.js';
+import { declaredOrgs, foundryAppliedState, foundryAppliedVersions, foundryDeclaredPlatform, foundryMutationLeases, foundryRequestedChanges, } from './schema.js';
 const UNIQUE_VIOLATION = '23505';
+/**
+ * #441: runs `write`, and with a `fence` only if its token is still the
+ * scope's current one. The lease row is locked for the write, so a takeover
+ * cannot slip between the check and the write.
+ */
+async function writeFenced(db, fence, write) {
+    if (!fence)
+        return write(db);
+    await db.transaction(async (tx) => {
+        const [row] = await tx
+            .select({ token: foundryMutationLeases.token })
+            .from(foundryMutationLeases)
+            .where(eq(foundryMutationLeases.scope, fence.scope))
+            .for('update');
+        if (!row || row.token !== fence.token)
+            throw new StaleLeaseError(fence.scope);
+        await write(tx);
+    });
+}
 /** `migrations/0004_slug_unique.sql` / `migrations/0015_domain_unique.sql`'s index names, read back off a caught unique-violation to tell which one fired. */
 const SLUG_UNIQUE_INDEX = 'foundry_declared_orgs_slug_idx';
 const DOMAIN_UNIQUE_INDEX = 'foundry_declared_orgs_domain_idx';
@@ -75,7 +95,21 @@ function rowToOrg(row) {
             roleMailboxes: row.roleMailboxes,
         },
         chat: { enabled: row.chatEnabled, usesDomain: row.chatUsesDomain },
-        calls: { enabled: row.callsEnabled, usesDomain: row.callsUsesDomain },
+        calls: {
+            enabled: row.callsEnabled,
+            usesDomain: row.callsUsesDomain,
+            // Omitted, not `null`, while neither column is set: every existing
+            // row (and every test fixture that builds a `CallsConfig` literal
+            // before this field existed) round-trips unchanged.
+            ...(row.callsVersionPinSynapse || row.callsVersionPinMas
+                ? {
+                    versionPin: {
+                        ...(row.callsVersionPinSynapse ? { synapse: row.callsVersionPinSynapse } : {}),
+                        ...(row.callsVersionPinMas ? { mas: row.callsVersionPinMas } : {}),
+                    },
+                }
+                : {}),
+        },
         issuer: { usesDomain: row.issuerUsesDomain },
         site: { enabled: row.siteEnabled, usesDomain: row.siteUsesDomain },
         hosting: {
@@ -119,6 +153,8 @@ function orgToRow(org) {
         chatUsesDomain: org.chat.usesDomain,
         callsEnabled: org.calls.enabled,
         callsUsesDomain: org.calls.usesDomain,
+        callsVersionPinSynapse: org.calls.versionPin?.synapse ?? null,
+        callsVersionPinMas: org.calls.versionPin?.mas ?? null,
         issuerUsesDomain: org.issuer.usesDomain,
         siteEnabled: org.site.enabled,
         siteUsesDomain: org.site.usesDomain,
@@ -268,11 +304,25 @@ export function createPostgresDeclaredOrgStore(db) {
     // `mail.ownerMailboxAddress` just because mail is on -- `validateMail`'s
     // own doc comment says why. Also covers #34's `mailApps` check, folded
     // into the same `validateMail`.
-    function requireValidMail(org) {
-        const reason = validateMail(org);
+    //
+    // #422: `allowExistingTier2` grandfathers an org already stored as a
+    // domain plus `mail.mode: 'received'` -- `update` passes it true only
+    // when that exact combination was already the row's state before this
+    // patch, so an unrelated edit to an already-tier-2 org still goes
+    // through. `create` never passes it: a brand new org cannot already be
+    // grandfathered.
+    function requireValidMail(org, opts) {
+        const reason = validateMail(org, opts);
         if (reason)
             throw new DeclaredOrgError(`mail invalid: ${reason} (#162)`);
     }
+    // #259: same place `requireValidMail` checks mail, on both `create` and
+    // the merged result of `update`.
+    function requireValidCalls(org) {
+        const reason = validateCalls(org);
+        if (reason)
+            throw new DeclaredOrgError(`calls invalid: ${reason} (#259)`);
+    }
     // `as`: `update` is overloaded in the interface (#351), which one object-literal method cannot express.
     return {
         async create(org) {
@@ -284,6 +334,7 @@ export function createPostgresDeclaredOrgStore(db) {
             requireValidSite(org);
             requireValidOwner(org);
             requireValidMail(org);
+            requireValidCalls(org);
             try {
                 await db.insert(declaredOrgs).values(orgToRow(org));
             }
@@ -339,6 +390,23 @@ export function createPostgresDeclaredOrgStore(db) {
             }
             return null;
         },
+        async findOtherOrgRecordingCoolifyId(id, exceptOrgId) {
+            const rows = await db
+                .select({ orgId: foundryAppliedState.orgId, serviceIds: foundryAppliedState.serviceIds })
+                .from(foundryAppliedState);
+            for (const row of rows) {
+                if (row.orgId === exceptOrgId)
+                    continue;
+                for (const [key, value] of Object.entries(row.serviceIds)) {
+                    const coolify = key === 'coolify_project' ||
+                        key.startsWith('coolify:app:') ||
+                        key.startsWith('coolify:database:');
+                    if (coolify && value === id)
+                        return row.orgId;
+                }
+            }
+            return null;
+        },
         async update(id, patch, opts) {
             const current = rowToOrg(await requireRow(id));
             // #351: already behind, so refuse without validating a write that will not happen.
@@ -366,7 +434,11 @@ export function createPostgresDeclaredOrgStore(db) {
             requireValidHosting(next);
             requireValidSite(next);
             requireValidOwner(next);
-            requireValidMail(next);
+            // #422: grandfather an org already stored as domain + `received` --
+            // refuse only when this patch is what newly puts it in that state.
+            const wasTier2 = current.domain !== null && current.mail.mode === 'received';
+            requireValidMail(next, { allowExistingTier2: wasTier2 });
+            requireValidCalls(next);
             try {
                 // #351: with `expectedVersion` the version check is part of this one
                 // statement, so an edit that lands after the read above makes it match
@@ -420,10 +492,44 @@ export function createPostgresDeclaredOrgStore(db) {
                         declaredOrgVersion: row.lastAppliedDeclaredOrgVersion,
                     }
                     : null,
+                ...(row.destroy ? { destroy: row.destroy } : {}),
             };
             return state;
         },
-        async putAppliedState(state) {
+        async acquireMutationLease(scope, holder, ttlMs) {
+            const expiresAt = sql `now() + ${ttlMs} * interval '1 millisecond'`;
+            const [row] = await db
+                .insert(foundryMutationLeases)
+                .values({ scope, token: 1, holder, expiresAt })
+                .onConflictDoUpdate({
+                target: foundryMutationLeases.scope,
+                set: { token: sql `${foundryMutationLeases.token} + 1`, holder, expiresAt },
+                setWhere: sql `${foundryMutationLeases.expiresAt} <= now()`,
+            })
+                .returning({ token: foundryMutationLeases.token });
+            if (row)
+                return { scope, token: row.token };
+            const [held] = await db
+                .select({ expiresAt: foundryMutationLeases.expiresAt })
+                .from(foundryMutationLeases)
+                .where(eq(foundryMutationLeases.scope, scope));
+            return { heldUntil: held?.expiresAt ?? new Date() };
+        },
+        async renewMutationLease(lease, ttlMs) {
+            const rows = await db
+                .update(foundryMutationLeases)
+                .set({ expiresAt: sql `now() + ${ttlMs} * interval '1 millisecond'` })
+                .where(and(eq(foundryMutationLeases.scope, lease.scope), eq(foundryMutationLeases.token, lease.token)))
+                .returning({ token: foundryMutationLeases.token });
+            return rows.length > 0;
+        },
+        async releaseMutationLease(lease) {
+            await db
+                .update(foundryMutationLeases)
+                .set({ expiresAt: sql `now()` })
+                .where(and(eq(foundryMutationLeases.scope, lease.scope), eq(foundryMutationLeases.token, lease.token)));
+        },
+        async putAppliedState(state, fence) {
             const values = {
                 orgId: state.orgId,
                 serviceIds: state.serviceIds,
@@ -431,21 +537,25 @@ export function createPostgresDeclaredOrgStore(db) {
                 failedFields: state.failedFields,
                 lastAppliedAt: state.lastApplied ? new Date(state.lastApplied.at) : null,
                 lastAppliedDeclaredOrgVersion: state.lastApplied?.declaredOrgVersion ?? null,
+                destroy: state.destroy ?? null,
             };
-            await db
+            await writeFenced(db, fence, (tx) => tx
                 .insert(foundryAppliedState)
                 .values(values)
-                .onConflictDoUpdate({ target: foundryAppliedState.orgId, set: values });
+                .onConflictDoUpdate({ target: foundryAppliedState.orgId, set: values })
+                .then(() => undefined));
         },
-        async delete(id) {
+        async delete(id, fence) {
             // Applied state first: `0002_applied_state.sql`'s
             // `foundry_applied_state_org_fkey` references the declared org with no
             // cascade, so deleting the org first would fail while its applied
             // state row still points at it. Both deletes are no-ops (idempotent)
             // when the row is already gone, matching this method's own doc
             // comment on `../store.ts`.
-            await db.delete(foundryAppliedState).where(eq(foundryAppliedState.orgId, id));
-            await db.delete(declaredOrgs).where(eq(declaredOrgs.id, id));
+            await writeFenced(db, fence, async (tx) => {
+                await tx.delete(foundryAppliedState).where(eq(foundryAppliedState.orgId, id));
+                await tx.delete(declaredOrgs).where(eq(declaredOrgs.id, id));
+            });
         },
     };
 }
@@ -549,8 +659,11 @@ export function createPostgresPlatformStore(db) {
                 .limit(1);
             return row?.serviceIds ?? {};
         },
-        async putServiceIds(serviceIds) {
-            await db.update(foundryDeclaredPlatform).set({ serviceIds });
+        async putServiceIds(serviceIds, fence) {
+            await writeFenced(db, fence, (tx) => tx
+                .update(foundryDeclaredPlatform)
+                .set({ serviceIds })
+                .then(() => undefined));
         },
     };
 }

package/dist/store/schema.d.ts

@@ -1,6 +1,6 @@
 import type { AppEnvSource, HostingEntry, IssuerApp, OwnerIdentity } from '../org.js';
 import type { Plan } from '../plan.js';
-import type { Checkpoint } from '../state.js';
+import type { Checkpoint, DestroyRecord } from '../state.js';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
  * the SQL carries the CHECKs drizzle-kit does not generate here (this
@@ -270,6 +270,40 @@ export declare const declaredOrgs: import("drizzle-orm/pg-core").PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        callsVersionPinSynapse: import("drizzle-orm/pg-core").PgColumn<{
+            name: "calls_version_pin_synapse";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        callsVersionPinMas: import("drizzle-orm/pg-core").PgColumn<{
+            name: "calls_version_pin_mas";
+            tableName: "foundry_declared_orgs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         issuerUsesDomain: import("drizzle-orm/pg-core").PgColumn<{
             name: "issuer_uses_domain";
             tableName: "foundry_declared_orgs";
@@ -945,6 +979,101 @@ export declare const foundryAppliedState: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        destroy: import("drizzle-orm/pg-core").PgColumn<{
+            name: "destroy";
+            tableName: "foundry_applied_state";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: DestroyRecord;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: DestroyRecord;
+        }>;
+    };
+    dialect: "pg";
+}>;
+/** Mirrors `migrations/0042_mutation_leases.sql`: one row per lock scope; `token` only ever rises (#441). */
+export declare const foundryMutationLeases: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_mutation_leases";
+    schema: undefined;
+    columns: {
+        scope: import("drizzle-orm/pg-core").PgColumn<{
+            name: "scope";
+            tableName: "foundry_mutation_leases";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        token: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token";
+            tableName: "foundry_mutation_leases";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        holder: import("drizzle-orm/pg-core").PgColumn<{
+            name: "holder";
+            tableName: "foundry_mutation_leases";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "foundry_mutation_leases";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
     };
     dialect: "pg";
 }>;
@@ -1107,7 +1236,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             tableName: "foundry_audit_events";
             dataType: "string";
             columnType: "PgText";
-            data: "plan" | "apply" | "destroy";
+            data: "plan" | "destroy" | "apply";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1119,7 +1248,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "plan" | "apply" | "destroy";
+            $type: "plan" | "destroy" | "apply";
         }>;
         actorId: import("drizzle-orm/pg-core").PgColumn<{
             name: "actor_id";
@@ -1177,7 +1306,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             tableName: "foundry_audit_events";
             dataType: "string";
             columnType: "PgText";
-            data: "applied" | "refused" | "failed" | "destroyed";
+            data: "applied" | "failed" | "refused" | "destroyed";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -1189,7 +1318,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "applied" | "refused" | "failed" | "destroyed";
+            $type: "applied" | "failed" | "refused" | "destroyed";
         }>;
         reason: import("drizzle-orm/pg-core").PgColumn<{
             name: "reason";

package/dist/store/schema.js

@@ -1,4 +1,4 @@
-import { bigserial, boolean, integer, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
+import { bigint, bigserial, boolean, integer, jsonb, pgTable, text, timestamp, } from 'drizzle-orm/pg-core';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
  * the SQL carries the CHECKs drizzle-kit does not generate here (this
@@ -31,6 +31,9 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     chatUsesDomain: boolean('chat_uses_domain').notNull().default(false),
     callsEnabled: boolean('calls_enabled').notNull().default(false),
     callsUsesDomain: boolean('calls_uses_domain').notNull().default(false),
+    // #259: null holds no pin -- the stack follows versions.json, same as today.
+    callsVersionPinSynapse: text('calls_version_pin_synapse'),
+    callsVersionPinMas: text('calls_version_pin_mas'),
     issuerUsesDomain: boolean('issuer_uses_domain').notNull().default(false),
     // SiteConfig (org.ts, T10). A brand new org has no cms site.
     siteEnabled: boolean('site_enabled').notNull().default(false),
@@ -101,6 +104,14 @@ export const foundryAppliedState = pgTable('foundry_applied_state', {
     failedFields: jsonb('failed_fields').notNull().default([]).$type(),
     lastAppliedAt: timestamp('last_applied_at', { withTimezone: true }),
     lastAppliedDeclaredOrgVersion: text('last_applied_declared_org_version'),
+    destroy: jsonb('destroy').$type(),
+});
+/** Mirrors `migrations/0042_mutation_leases.sql`: one row per lock scope; `token` only ever rises (#441). */
+export const foundryMutationLeases = pgTable('foundry_mutation_leases', {
+    scope: text('scope').primaryKey(),
+    token: bigint('token', { mode: 'number' }).notNull(),
+    holder: text('holder').notNull(),
+    expiresAt: timestamp('expires_at', { withTimezone: true }).notNull(),
 });
 /**
  * Mirrors `migrations/0036_applied_versions.sql`, the source of truth: an

package/dist/store.d.ts

@@ -13,6 +13,24 @@ export interface StaleUpdate {
     /** The org as it stands now. */
     current: DeclaredOrg;
 }
+/**
+ * A held mutation lease (#441). `token` rises on every acquire of a scope, so
+ * a worker whose lease expired and was taken over holds a token the store no
+ * longer accepts: its fenced writes are refused.
+ */
+export interface MutationLease {
+    scope: string;
+    token: number;
+}
+/** What `acquireMutationLease` returns while another holder has the scope: when that lease runs out. */
+export interface HeldLease {
+    heldUntil: Date;
+}
+/** A fenced write (`putAppliedState`, `putServiceIds`) came from a lease that is no longer the current one (#441). Nothing was written. */
+export declare class StaleLeaseError extends Error {
+    readonly scope: string;
+    constructor(scope: string);
+}
 /**
  * The persistence seam https://github.com/wtfalch/foundry/issues/18
  * implements: create, read and edit a {@link DeclaredOrg}, and read and
@@ -44,6 +62,12 @@ export interface DeclaredOrgStore {
      * record instead.
      */
     findOrgIdForZone(zoneId: string): Promise<OrgId | null>;
+    /**
+     * Archon#271: an org other than `exceptOrgId` whose applied state records
+     * `id` as a Coolify app, database or project, or `null`. Adopt refuses a
+     * resource another org already holds.
+     */
+    findOtherOrgRecordingCoolifyId(id: string, exceptOrgId: OrgId): Promise<OrgId | null>;
     /**
      * Combinations foundry knows are impossible are rejected with a reason
      * (#18 "Done when"), so a caller must be ready for this to throw rather
@@ -58,7 +82,26 @@ export interface DeclaredOrgStore {
      */
     update(id: OrgId, patch: Partial<DeclaredOrg>, opts: UpdateOptions): Promise<DeclaredOrg | StaleUpdate>;
     getAppliedState(id: OrgId): Promise<AppliedState | null>;
-    putAppliedState(state: AppliedState): Promise<void>;
+    /**
+     * With `fence` (#441), compare-and-set: the write happens only while
+     * `fence.token` is still the scope's current lease token, otherwise it
+     * throws {@link StaleLeaseError} and writes nothing.
+     */
+    putAppliedState(state: AppliedState, fence?: MutationLease): Promise<void>;
+    /**
+     * #441: takes the exclusive mutation lease for `scope` (`company:<orgId>`
+     * or `platform`), or returns {@link HeldLease} while another holder's lease
+     * has not expired. Every successful acquire issues a higher token than the last.
+     */
+    acquireMutationLease(scope: string, holder: string, ttlMs: number): Promise<MutationLease | HeldLease>;
+    /**
+     * Extends the lease to `ttlMs` from now, only while `lease.token` is still
+     * the scope's current token. Returns false once it is not: the holder lost
+     * the scope and must stop before its next provider step.
+     */
+    renewMutationLease(lease: MutationLease, ttlMs: number): Promise<boolean>;
+    /** Frees the lease at once. A no-op if the lease was already taken over. */
+    releaseMutationLease(lease: MutationLease): Promise<void>;
     /**
      * Removes the declared org and its applied state together. Called only by
      * `FoundryPlanApply.destroy` (`plan/plan-apply.ts`), once every resource it
@@ -68,7 +111,7 @@ export interface DeclaredOrgStore {
      * not an error, so a retried destroy that reaches this step twice never
      * throws.
      */
-    delete(id: OrgId): Promise<void>;
+    delete(id: OrgId, fence?: MutationLease): Promise<void>;
 }
 /**
  * The persistence seam for #166's {@link DeclaredPlatform}, mirroring
@@ -87,8 +130,8 @@ export interface PlatformStore {
      * before the first apply. `put` never touches it.
      */
     getServiceIds(): Promise<Record<string, string>>;
-    /** Replaces the recorded ids. A no-op until the platform is declared. */
-    putServiceIds(serviceIds: Record<string, string>): Promise<void>;
+    /** Replaces the recorded ids. A no-op until the platform is declared. With `fence` (#441), compare-and-set as {@link DeclaredOrgStore.putAppliedState}. */
+    putServiceIds(serviceIds: Record<string, string>, fence?: MutationLease): Promise<void>;
 }
 /**
  * One recorded apply, appended to the history #253 keeps beside

package/dist/store.js

@@ -1 +1,9 @@
-export {};
+/** A fenced write (`putAppliedState`, `putServiceIds`) came from a lease that is no longer the current one (#441). Nothing was written. */
+export class StaleLeaseError extends Error {
+    scope;
+    constructor(scope) {
+        super(`mutation lease for ${scope} was lost to a newer holder; nothing written`);
+        this.scope = scope;
+        this.name = 'StaleLeaseError';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.16.16",
+  "version": "0.17.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",