@wtfalch/foundry 0.17.1 → 0.18.0

package/dist/plan/plan-apply.js

@@ -7,15 +7,15 @@ import { StaleLeaseError, } from '../store.js';
 import { AdoptRefusedError, adoptCandidates, adoptedKeysUnreadable, adoptedScopeKey, parseAdoptSnapshot, planAdoptFrom, } from './adopt.js';
 import { NO_AGORA_HOST_VALUES, readAgoraHost, } from './agora.js';
 import { AI_KEY_UNDELIVERED_SCOPE_KEY, JOBS_REGISTRATION_UNDELIVERED_SCOPE_KEY, computePlanDetail, toPlan, } from './diff.js';
-import { edgeWorkerTraceScopeKeys, liveEdgeWorkers } from './edge-worker.js';
 import { entryAiUndeliveredScopeKey } from './entry-ai-key.js';
+import { entryEdgeRetiredScopeKey, entryEdgeUndeliveredScopeKey } from './entry-edge-key.js';
 import { FILES_ROOT_UNDELIVERED_SCOPE_KEY, entryFilesUndeliveredScopeKey, } from './entry-files-key.js';
-import { entryNamesRetiredScopeKey, entryNamesUndeliveredScopeKey } from './entry-names-key.js';
 import { readLivePlatformResources, readLiveResources, } from './live.js';
 import { lockedHostnames } from './locked-hostnames.js';
 import { PLATFORM_ARCHON_KEY, PLATFORM_FILES_APPLIED_HOSTNAME_SCOPE_KEY, PLATFORM_FILES_KEY, appStepKey, planPlatform as computePlatformPlanDetail, toPlatformPlan, } from './platform-diff.js';
 import { DEFAULT_ORG_PLATFORM_READINESS, ORG_PLATFORM_KEY_REFS, agoraHostValuesFromPlatform, heldPlatformKeyRefs, orgPlatformReadinessFrom, } from './platform-org.js';
 import { PLATFORM_AUTH_BROKER_MAIL_KEY_REF } from './platform-providers.js';
+import { liveWorkers, workerTraceScopeKeys } from './worker.js';
 /** #441: the lease scope that serializes every mutation of one company, and the one for the shared platform. */
 const companyScope = (orgId) => `company:${orgId}`;
 const PLATFORM_SCOPE = 'platform';
@@ -100,7 +100,7 @@ const HOSTNAME_STEPS = new Set([
     'cloudflare:access',
     'jobs:registration',
     // #318 (F8): the route is itself hostname-shaped, validated against the
-    // org's own domain by `validateEntryEdge`.
+    // org's own domain by `validateEntryWorker`.
     'cloudflare:worker',
 ]);
 /**
@@ -124,7 +124,7 @@ export class FoundryPlanApply {
     edgeWorkers;
     hostFiles;
     hostAi;
-    hostNames;
+    hostEdge;
     now;
     leaseTtlMs;
     appliedVersions;
@@ -145,7 +145,7 @@ export class FoundryPlanApply {
         this.edgeWorkers = options.edgeWorkers ?? false;
         this.hostFiles = options.filesOrganisation ?? false;
         this.hostAi = options.aiOrganisation ?? false;
-        this.hostNames = options.names ?? false;
+        this.hostEdge = options.edge ?? false;
         this.now = options.now ?? (() => new Date());
         this.leaseTtlMs = options.leaseTtlMs ?? DEFAULT_LEASE_TTL_MS;
         this.appliedVersions = options.appliedVersions;
@@ -543,7 +543,7 @@ export class FoundryPlanApply {
                             // #318: its partial-deploy traces too, or a retry after a later
                             // step fails would read this Worker as live again.
                             const entryKey = target.key.slice(id.length + 1);
-                            for (const scopeKey of edgeWorkerTraceScopeKeys(entryKey)) {
+                            for (const scopeKey of workerTraceScopeKeys(entryKey)) {
                                 delete serviceIds[scopeKey];
                             }
                         }
@@ -869,6 +869,7 @@ export class FoundryPlanApply {
             this.orgArchonUrl(),
         ]);
         const otherSlugs = (await this.store.list()).filter((o) => o.id !== id).map((o) => o.slug);
+        const platformHostnames = await this.platformServiceHostnames();
         const detail = computePlanDetail(org, live, applied?.serviceIds ?? {}, agoraHost, this.jobsScheduler, platformReadiness, {
             loginHostBindings: this.loginHostBindings,
             broker: this.broker,
@@ -876,6 +877,7 @@ export class FoundryPlanApply {
             otherSlugs,
             now: () => this.now().getTime(),
             archonUrl,
+            platformHostnames,
         });
         const invalid = await this.invalidHosting(org);
         if (invalid) {
@@ -895,15 +897,15 @@ export class FoundryPlanApply {
      * which only the plan can read.
      */
     async invalidHosting(org) {
-        const platform = await this.platformDeps?.store.get();
-        const platformHostnames = platform
-            ? PLATFORM_SERVICE_KEYS.map((k) => platform[k].hostname)
-            : [];
         return validateHosting(org.hosting, {
             domain: org.domain,
-            locked: lockedHostnames(org, platformHostnames),
+            locked: lockedHostnames(org, await this.platformServiceHostnames()),
         });
     }
+    async platformServiceHostnames() {
+        const platform = await this.platformDeps?.store.get();
+        return platform ? PLATFORM_SERVICE_KEYS.map((k) => platform[k].hostname) : [];
+    }
     /**
      * #177: an org's plan reads the shared platform's own addresses and
      * readiness through the very `platform` deps `planPlatform`/`applyPlatform`
@@ -927,7 +929,7 @@ export class FoundryPlanApply {
             refs.add(ORG_PLATFORM_KEY_REFS.ai);
         if (this.jobsScheduler)
             refs.add(ORG_PLATFORM_KEY_REFS.jobs);
-        const readiness = orgPlatformReadinessFrom(platform, recorded, refs, !heldKeys, this.hostNames);
+        const readiness = orgPlatformReadinessFrom(platform, recorded, refs, !heldKeys, this.hostEdge);
         // Entry env from the platform's mail key or a shared secret (#T8).
         let mailKeyHeld = false;
         try {
@@ -1138,7 +1140,7 @@ function destroyTargets(serviceIds, orgId) {
         'zitadel:login-host:',
         'cloudflare:tunnel:',
         'cloudflare:access:',
-        // #318: an entry's edge Worker and its route.
+        // #318: an entry's Worker and its route.
         'cloudflare:worker:',
         'coolify:database:',
         'coolify:app:',
@@ -1147,18 +1149,18 @@ function destroyTargets(serviceIds, orgId) {
         'ai:key:',
         // F6b: an entry's files key, `<orgId>:<entry>`; the org's own key has no `:` and is left alone.
         'files:key:',
-        // F7 (#317): an entry's names key, `<orgId>:<entry>` -- names has no org-root key.
-        'names:key:',
+        // F7 (#317): an entry's edge key, `<orgId>:<entry>` -- edge has no org-root key.
+        'edge:key:',
     ];
     const targets = [];
     const adopted = adoptedResourceIds(serviceIds);
     for (const prefix of ORDERED_PREFIXES) {
         if (prefix === 'cloudflare:worker:') {
-            // #318 re-review: not the main ids alone -- `liveEdgeWorkers` also
+            // #318 re-review: not the main ids alone -- `liveWorkers` also
             // finds an upload-only or route-only partial deploy, and leaves out an
             // entry whose Worker is already retired (nothing live, so a host with
             // no WorkersPort is not blocked from destroying the org by it).
-            for (const [entryKey, scriptName] of liveEdgeWorkers(orgId, serviceIds)) {
+            for (const [entryKey, scriptName] of liveWorkers(orgId, serviceIds)) {
                 targets.push({
                     system: 'cloudflare',
                     kind: 'worker',
@@ -1181,16 +1183,16 @@ function destroyTargets(serviceIds, orgId) {
             // A key a retire step already revoked before org destroy ever ran
             // (#317 review): `runSteps` never clears this main id on a step that
             // returns no resourceId, so without this check destroy would target
-            // an already-revoked key and get stuck on names' 404 forever.
-            if (prefix === 'names:key:') {
+            // an already-revoked key and get stuck on edge' 404 forever.
+            if (prefix === 'edge:key:') {
                 // `resourceKey.slice(prefix.length)` is `<orgId>:<entryKey>`, but
-                // `entryNamesRetiredScopeKey` takes the bare entry key alone (as
-                // every caller in entry-names-key.ts/executor.ts gives it) --
+                // `entryEdgeRetiredScopeKey` takes the bare entry key alone (as
+                // every caller in entry-edge-key.ts/executor.ts gives it) --
                 // entry keys hold no `:` of their own, so the first one found is
                 // exactly the org id/entry key boundary.
                 const fullKey = resourceKey.slice(prefix.length);
                 const entryKey = fullKey.slice(fullKey.indexOf(':') + 1);
-                if (serviceIds[entryNamesRetiredScopeKey(entryKey)] === id)
+                if (serviceIds[entryEdgeRetiredScopeKey(entryKey)] === id)
                     continue;
             }
             const [system, kind] = prefix.split(':');
@@ -1198,7 +1200,7 @@ function destroyTargets(serviceIds, orgId) {
         }
     }
     // F7 (#317): a key minted but never delivered never gets the main
-    // `names:key:<org>:<entry>` id recorded (the mint step throws before
+    // `edge:key:<org>:<entry>` id recorded (the mint step throws before
     // `runSteps` sees a `resourceId`), so the loop above never finds it to
     // revoke on destroy. Skipped if a later mint already succeeded and holds
     // its own, still-live main id -- entry keys hold no `:`, so matching the
@@ -1207,19 +1209,19 @@ function destroyTargets(serviceIds, orgId) {
     // marker A); re-declare, mint B, fail delivery three times (undelivered
     // B, main id stays A). Without this check, A's stale-but-truthy main id
     // hid B from destroy, leaking it the same way the gone-scan in
-    // `entry-names-key.ts` once did (#317 re-review).
-    const undeliveredNamesPrefix = 'names_key_undelivered_';
+    // `entry-edge-key.ts` once did (#317 re-review).
+    const undeliveredEdgePrefix = 'edge_key_undelivered_';
     for (const [resourceKey, id] of Object.entries(serviceIds)) {
-        if (!id || !resourceKey.startsWith(undeliveredNamesPrefix))
+        if (!id || !resourceKey.startsWith(undeliveredEdgePrefix))
             continue;
-        const entryKey = resourceKey.slice(undeliveredNamesPrefix.length);
+        const entryKey = resourceKey.slice(undeliveredEdgePrefix.length);
         const hasLaterMainId = Object.entries(serviceIds).some(([k, v]) => v &&
-            k.startsWith('names:key:') &&
+            k.startsWith('edge:key:') &&
             k.endsWith(`:${entryKey}`) &&
-            serviceIds[entryNamesRetiredScopeKey(entryKey)] !== v);
+            serviceIds[entryEdgeRetiredScopeKey(entryKey)] !== v);
         if (hasLaterMainId)
             continue;
-        targets.push({ system: 'names', kind: 'key', key: entryKey, id });
+        targets.push({ system: 'edge', kind: 'key', key: entryKey, id });
     }
     for (const [resourceKey, id] of Object.entries(serviceIds)) {
         if (!resourceKey.startsWith('zitadel:app:'))
@@ -1302,7 +1304,7 @@ const STEP_FIELDS = {
     'cloudflare:zone': 'hosting.usesDomain',
     'cloudflare:access': 'hosting.accessEmails',
     'cloudflare:ratelimit': 'hosting.usesDomain',
-    'cloudflare:worker': 'hosting.entries.edge',
+    'cloudflare:worker': 'hosting.entries.worker',
 };
 function stepField(action) {
     // An entry's ai key (F6a) is keyed `<orgId>:<entry>`; the org's own is `<orgId>`.
@@ -1312,9 +1314,9 @@ function stepField(action) {
     // The org's own files key (F6b) is keyed `<orgId>`, an entry's `<orgId>:<entry>`.
     if (action.system === 'files' && action.kind === 'key')
         return 'hosting.entries.uses.files';
-    // An entry's names key (F7): always `<orgId>:<entry>`, names has no org-root key.
-    if (action.system === 'names' && action.kind === 'key')
-        return 'hosting.entries.uses.names';
+    // An entry's edge key (F7): always `<orgId>:<entry>`, edge has no org-root key.
+    if (action.system === 'edge' && action.kind === 'key')
+        return 'hosting.entries.uses.edge';
     // An org declares several issuer apps, each keyed by its name (#71).
     if (action.system === 'zitadel' && action.kind === 'app') {
         return `hosting.issuerApps.${action.key}`;
@@ -1363,15 +1365,15 @@ function failedFields(org, detail, completed, serviceIds) {
             }
         }
     }
-    // The same for an entry's names key (F7): minted, never delivered is no
+    // The same for an entry's edge key (F7): minted, never delivered is no
     // longer blocked forever on its own (the next apply revokes it and
     // mints again, #317 re-review) -- but while that retry step is itself
-    // not planned this run (no names service wired, say), the leftover
+    // not planned this run (no edge service wired, say), the leftover
     // undelivered id must still read as unresolved rather than the org
     // converging silently around it.
     for (const entry of org.hosting.entries) {
-        if (entry.uses?.names && serviceIds[entryNamesUndeliveredScopeKey(entry.key)]) {
-            failed.add('hosting.entries.uses.names');
+        if (entry.uses?.edge && serviceIds[entryEdgeUndeliveredScopeKey(entry.key)]) {
+            failed.add('hosting.entries.uses.edge');
         }
     }
     // The same for a jobs registration whose credentials never reached the host.

package/dist/plan/platform-diff.d.ts

@@ -622,32 +622,32 @@ export declare const PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY = "files_ma
 export declare const PLATFORM_FILES_APPLIED_HOSTNAME_SCOPE_KEY = "files_applied_hostname";
 export declare const PLATFORM_FILES_APPLIED_GIT_REF_SCOPE_KEY = "files_applied_git_ref";
 /**
- * #478: the resource key `planNames` plans under and
+ * #478: the resource key `planEdge` plans under and
  * `FoundryPlatformStepExecutor` dispatches on -- the {@link PLATFORM_FILES_KEY}
- * shape for the names host (https://github.com/wtfalch/names). `runPlatformSteps`
- * records the app's uuid under `coolify:app:platform:names` once the step
- * succeeds, which is what stops `planNames` planning it again.
+ * shape for the edge host (https://github.com/wtfalch/edge). `runPlatformSteps`
+ * records the app's uuid under `coolify:app:platform:edge` once the step
+ * succeeds, which is what stops `planEdge` planning it again.
  */
-export declare const PLATFORM_NAMES_KEY = "platform:names";
+export declare const PLATFORM_EDGE_KEY = "platform:edge";
 /**
- * #478: the held-key ref the names platform secret's full value is
+ * #478: the held-key ref the edge platform secret's full value is
  * delivered under, once, by {@link FoundryStepExecutorPorts.deliverSecret} --
  * never the host's app env, which gets only its SHA-256 hash
- * (`NAMES_PLATFORM_KEY_HASH`). Archon's own `NamesPort` reads the full
- * secret back from this ref to call names' `mintKey`/`revokeKey`/
+ * (`EDGE_PLATFORM_KEY_HASH`). Archon's own `EdgePort` reads the full
+ * secret back from this ref to call edge' `mintKey`/`revokeKey`/
  * `setReservedLabels`.
  */
-export declare const PLATFORM_NAMES_KEY_REF = "names:platform:key";
+export declare const PLATFORM_EDGE_KEY_REF = "edge:platform:key";
 /**
- * #478: the held-key ref for names' own Cloudflare API token (tunnel edit +
+ * #478: the held-key ref for edge' own Cloudflare API token (tunnel edit +
  * DNS edit on one account) -- the issue's own "never Archon's token": this
- * is a narrower, names-only credential a human provisions and holds
- * separately from whatever broader token `PlatformNamesDeps.cloudflare`
+ * is a narrower, edge-only credential a human provisions and holds
+ * separately from whatever broader token `PlatformEdgeDeps.cloudflare`
  * uses to stand the host itself up on Coolify.
  */
-export declare const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = "cloudflare:names:apiToken";
+export declare const PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF = "cloudflare:edge:apiToken";
 /**
- * #478: scope keys (colon-free) for the names platform key, the
+ * #478: scope keys (colon-free) for the edge platform key, the
  * {@link PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY} pattern once:
  * the undelivered id is recorded and persisted the moment the secret is
  * minted, before delivery; the guard is recorded only once it was delivered
@@ -655,16 +655,16 @@ export declare const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = "cloudflare:names:api
  * means the secret is lost (never kept past that point): the planner
  * reports it and never mints again. Neither key holds the secret itself.
  */
-export declare const PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = "names_platform_key_undelivered";
-export declare const PLATFORM_NAMES_PLATFORM_KEY_SET_SCOPE_KEY = "names_platform_key_set";
+export declare const PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = "edge_platform_key_undelivered";
+export declare const PLATFORM_EDGE_PLATFORM_KEY_SET_SCOPE_KEY = "edge_platform_key_set";
 /**
  * #478: the hostname and `gitRef` the last successful names run applied.
- * `planNames` plans the step again when either differs from the declared
+ * `planEdge` plans the step again when either differs from the declared
  * value; a re-run updates `git_branch` and the runner env and redeploys,
  * and mints no new platform key (the guards above hold).
  */
-export declare const PLATFORM_NAMES_APPLIED_HOSTNAME_SCOPE_KEY = "names_applied_hostname";
-export declare const PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY = "names_applied_git_ref";
+export declare const PLATFORM_EDGE_APPLIED_HOSTNAME_SCOPE_KEY = "edge_applied_hostname";
+export declare const PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY = "edge_applied_git_ref";
 /**
  * Options for {@link planPlatform}, replacing four positional arguments that
  * shifted on every merge that added a platform service (#186, #187, #188) --
@@ -703,8 +703,8 @@ export interface PlanPlatformOptions {
         ai?: string;
         archon?: string;
         mail?: string;
-        /** #478: why the names host is blocked, or absent when it is not. */
-        names?: string;
+        /** #478: why the edge host is blocked, or absent when it is not. */
+        edge?: string;
         /**
          * #257: true once a service's database exists but the host built the
          * platform executor with no backup dependencies -- every such service's
@@ -756,7 +756,7 @@ export interface PlanPlatformOptions {
  * Scope for #167: the frame plus one step, {@link planApexZone}. #173 adds
  * {@link planJobs}, #170 adds {@link planSfu}, #168 adds {@link planAuth},
  * #169 adds {@link planMail}, #174 adds {@link planIntegrations}, #171 adds
- * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planNames}
+ * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planEdge}
  * and #175 adds
  * {@link planArchon}, the same way #19 shipped org plan/apply against
  * three singletons before #27, #71, #80 and the rest added the remaining

package/dist/plan/platform-diff.js

@@ -698,32 +698,32 @@ export const PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY = 'files_management
 export const PLATFORM_FILES_APPLIED_HOSTNAME_SCOPE_KEY = 'files_applied_hostname';
 export const PLATFORM_FILES_APPLIED_GIT_REF_SCOPE_KEY = 'files_applied_git_ref';
 /**
- * #478: the resource key `planNames` plans under and
+ * #478: the resource key `planEdge` plans under and
  * `FoundryPlatformStepExecutor` dispatches on -- the {@link PLATFORM_FILES_KEY}
- * shape for the names host (https://github.com/wtfalch/names). `runPlatformSteps`
- * records the app's uuid under `coolify:app:platform:names` once the step
- * succeeds, which is what stops `planNames` planning it again.
+ * shape for the edge host (https://github.com/wtfalch/edge). `runPlatformSteps`
+ * records the app's uuid under `coolify:app:platform:edge` once the step
+ * succeeds, which is what stops `planEdge` planning it again.
  */
-export const PLATFORM_NAMES_KEY = 'platform:names';
+export const PLATFORM_EDGE_KEY = 'platform:edge';
 /**
- * #478: the held-key ref the names platform secret's full value is
+ * #478: the held-key ref the edge platform secret's full value is
  * delivered under, once, by {@link FoundryStepExecutorPorts.deliverSecret} --
  * never the host's app env, which gets only its SHA-256 hash
- * (`NAMES_PLATFORM_KEY_HASH`). Archon's own `NamesPort` reads the full
- * secret back from this ref to call names' `mintKey`/`revokeKey`/
+ * (`EDGE_PLATFORM_KEY_HASH`). Archon's own `EdgePort` reads the full
+ * secret back from this ref to call edge' `mintKey`/`revokeKey`/
  * `setReservedLabels`.
  */
-export const PLATFORM_NAMES_KEY_REF = 'names:platform:key';
+export const PLATFORM_EDGE_KEY_REF = 'edge:platform:key';
 /**
- * #478: the held-key ref for names' own Cloudflare API token (tunnel edit +
+ * #478: the held-key ref for edge' own Cloudflare API token (tunnel edit +
  * DNS edit on one account) -- the issue's own "never Archon's token": this
- * is a narrower, names-only credential a human provisions and holds
- * separately from whatever broader token `PlatformNamesDeps.cloudflare`
+ * is a narrower, edge-only credential a human provisions and holds
+ * separately from whatever broader token `PlatformEdgeDeps.cloudflare`
  * uses to stand the host itself up on Coolify.
  */
-export const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = 'cloudflare:names:apiToken';
+export const PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF = 'cloudflare:edge:apiToken';
 /**
- * #478: scope keys (colon-free) for the names platform key, the
+ * #478: scope keys (colon-free) for the edge platform key, the
  * {@link PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY} pattern once:
  * the undelivered id is recorded and persisted the moment the secret is
  * minted, before delivery; the guard is recorded only once it was delivered
@@ -731,16 +731,16 @@ export const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = 'cloudflare:names:apiToken';
  * means the secret is lost (never kept past that point): the planner
  * reports it and never mints again. Neither key holds the secret itself.
  */
-export const PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = 'names_platform_key_undelivered';
-export const PLATFORM_NAMES_PLATFORM_KEY_SET_SCOPE_KEY = 'names_platform_key_set';
+export const PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = 'edge_platform_key_undelivered';
+export const PLATFORM_EDGE_PLATFORM_KEY_SET_SCOPE_KEY = 'edge_platform_key_set';
 /**
  * #478: the hostname and `gitRef` the last successful names run applied.
- * `planNames` plans the step again when either differs from the declared
+ * `planEdge` plans the step again when either differs from the declared
  * value; a re-run updates `git_branch` and the runner env and redeploys,
  * and mints no new platform key (the guards above hold).
  */
-export const PLATFORM_NAMES_APPLIED_HOSTNAME_SCOPE_KEY = 'names_applied_hostname';
-export const PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY = 'names_applied_git_ref';
+export const PLATFORM_EDGE_APPLIED_HOSTNAME_SCOPE_KEY = 'edge_applied_hostname';
+export const PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY = 'edge_applied_git_ref';
 /**
  * #167: the platform's own diff engine, mirroring `diff.ts`'s
  * `computePlanDetail` for the one shared {@link DeclaredPlatform} record
@@ -755,7 +755,7 @@ export const PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY = 'names_applied_git_ref';
  * Scope for #167: the frame plus one step, {@link planApexZone}. #173 adds
  * {@link planJobs}, #170 adds {@link planSfu}, #168 adds {@link planAuth},
  * #169 adds {@link planMail}, #174 adds {@link planIntegrations}, #171 adds
- * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planNames}
+ * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planEdge}
  * and #175 adds
  * {@link planArchon}, the same way #19 shipped org plan/apply against
  * three singletons before #27, #71, #80 and the rest added the remaining
@@ -805,10 +805,10 @@ export function planPlatform(platform, live, options = {}) {
     const ai = planAi(platform, recordedIds, blocked.ai);
     if (ai.step)
         plannedSteps.push(ai.step);
-    // #478: independent of auth and files -- the names host needs neither.
-    const names = planNames(platform, recordedIds, blocked.names);
-    if (names.step)
-        plannedSteps.push(names.step);
+    // #478: independent of auth and files -- the edge host needs neither.
+    const edge = planEdge(platform, recordedIds, blocked.edge);
+    if (edge.step)
+        plannedSteps.push(edge.step);
     // #175: last, on purpose. Archon's sign-in client lives in the sign-in
     // `planAuth` builds, and its env reads what every other service's step
     // records or delivers, so in one apply it runs after all of them.
@@ -842,9 +842,9 @@ export function planPlatform(platform, live, options = {}) {
         integrations.blocked
             ? null
             : versionChangeLine('integrations', recordedIds[PLATFORM_INTEGRATIONS_APPLIED_GITREF_SCOPE_KEY], platform.integrations.gitRef, 'git ref, redeploy'),
-        names.blocked
+        edge.blocked
             ? null
-            : versionChangeLine('names', recordedIds[PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY], platform.names.gitRef, 'git ref, redeploy'),
+            : versionChangeLine('edge', recordedIds[PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY], platform.edge.gitRef, 'git ref, redeploy'),
         auth.blocked
             ? null
             : versionNotAppliedLine('zitadel', Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_AUTH_KEY)]), recordedIds[PLATFORM_AUTH_ZITADEL_APPLIED_IMAGE_TAG_SCOPE_KEY], VERSIONS.zitadel),
@@ -876,8 +876,8 @@ export function planPlatform(platform, live, options = {}) {
         unmanaged.push({ description: files.blocked, key: 'files' });
     if (ai.blocked)
         unmanaged.push({ description: ai.blocked, key: 'ai' });
-    if (names.blocked)
-        unmanaged.push({ description: names.blocked, key: 'names' });
+    if (edge.blocked)
+        unmanaged.push({ description: edge.blocked, key: 'edge' });
     if (archon.blocked)
         unmanaged.push({ description: archon.blocked, key: 'archon' });
     // #398: the old integrations key stays pinned until Archon holds the new
@@ -1747,13 +1747,13 @@ function planFiles(platform, recordedIds, executorBlocked, authReady, drifted) {
     };
 }
 /**
- * #478: the names host (https://github.com/wtfalch/names) -- its database
+ * #478: the edge host (https://github.com/wtfalch/edge) -- its database
  * (owner and runtime roles), its one Coolify app (no separate migrate app:
  * the Dockerfile migrates inside the runner's own entrypoint, see
- * `provisionPlatformNames`'s own doc comment), foundry's own platform key
+ * `provisionPlatformEdge`'s own doc comment), foundry's own platform key
  * (minted once, its hash alone written to the runner) and a Cloudflare
- * tunnel + DNS record at `platform.names.hostname`. One `coolify:app` step
- * keyed {@link PLATFORM_NAMES_KEY}, the {@link planFiles} bundling shape,
+ * tunnel + DNS record at `platform.edge.hostname`. One `coolify:app` step
+ * keyed {@link PLATFORM_EDGE_KEY}, the {@link planFiles} bundling shape,
  * public like {@link planMail}/{@link planAuth} rather than internal-only
  * like {@link planFiles}/{@link planAi}.
  *
@@ -1764,23 +1764,23 @@ function planFiles(platform, recordedIds, executorBlocked, authReady, drifted) {
  *
  * Blocked, not planned: a platform key minted but never delivered (lost,
  * `ServiceError`-free the way {@link planFiles}'s own management-key check
- * is), or `executorBlocked` -- the host built no names dependencies, or
+ * is), or `executorBlocked` -- the host built no edge dependencies, or
  * (CLAUDE.md's "Human steps") no Cloudflare API token is held yet under
- * {@link PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF}.
+ * {@link PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF}.
  */
-function planNames(platform, recordedIds, executorBlocked) {
-    if (!platform.names.enabled)
+function planEdge(platform, recordedIds, executorBlocked) {
+    if (!platform.edge.enabled)
         return { step: null, blocked: null };
-    const undelivered = recordedIds[PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY];
-    if (undelivered && !recordedIds[PLATFORM_NAMES_PLATFORM_KEY_SET_SCOPE_KEY]) {
+    const undelivered = recordedIds[PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY];
+    if (undelivered && !recordedIds[PLATFORM_EDGE_PLATFORM_KEY_SET_SCOPE_KEY]) {
         return {
             step: null,
-            blocked: `the names host is blocked, not planned: its platform key (${undelivered}) was minted but never delivered and cannot be shown again; remove the recorded key ${PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY} to mint a new one`,
+            blocked: `the edge host is blocked, not planned: its platform key (${undelivered}) was minted but never delivered and cannot be shown again; remove the recorded key ${PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY} to mint a new one`,
         };
     }
-    const applied = Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_NAMES_KEY)]) &&
-        recordedIds[PLATFORM_NAMES_APPLIED_HOSTNAME_SCOPE_KEY] === platform.names.hostname &&
-        recordedIds[PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY] === platform.names.gitRef;
+    const applied = Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_EDGE_KEY)]) &&
+        recordedIds[PLATFORM_EDGE_APPLIED_HOSTNAME_SCOPE_KEY] === platform.edge.hostname &&
+        recordedIds[PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY] === platform.edge.gitRef;
     if (applied)
         return { step: null, blocked: null };
     if (executorBlocked)
@@ -1790,11 +1790,11 @@ function planNames(platform, recordedIds, executorBlocked) {
             action: {
                 system: 'coolify',
                 kind: 'app',
-                key: PLATFORM_NAMES_KEY,
-                desired: { hostname: platform.names.hostname, gitRef: platform.names.gitRef },
+                key: PLATFORM_EDGE_KEY,
+                desired: { hostname: platform.edge.hostname, gitRef: platform.edge.gitRef },
             },
             step: {
-                description: `provision the names host at ${platform.names.hostname}, with its own database and foundry's platform key`,
+                description: `provision the edge host at ${platform.edge.hostname}, with its own database and foundry's platform key`,
                 destroys: false,
                 migrates: false,
             },

package/dist/plan/platform-org.d.ts

@@ -88,16 +88,16 @@ export interface OrgPlatformReadiness {
     /** The jobs scheduler (#173) is enabled, applied, and its admin token is held. */
     jobsReady: boolean;
     /**
-     * #317 (F7) and #478: the names service is declared `enabled`, its own
-     * `coolify:app` deploy step has applied (`provisionPlatformNames`), and
-     * the host's executor was built with a `NamesPort` -- the same
+     * #317 (F7) and #478: the edge service is declared `enabled`, its own
+     * `coolify:app` deploy step has applied (`provisionPlatformEdge`), and
+     * the host's executor was built with an `EdgePort` -- the same
      * `filesReady`/`aiReady` "declared and applied" shape now that #478 built
      * the deploy step #317 shipped ahead of (this field's own doc comment
      * used to say there was none; N1 is no longer deployed by hand).
      */
-    namesReady: boolean;
-    /** `https://<platform.names.hostname>`, which an entry with `uses.names` gets as `NAMES_URL`. `null` until `namesReady`. */
-    namesUrl?: string | null;
+    edgeReady: boolean;
+    /** `https://<platform.edge.hostname>`, which an entry with `uses.edge` gets as `EDGE_URL`. `null` until `edgeReady`. */
+    edgeUrl?: string | null;
     /**
      * The ref of a platform key an applied service needs that is not held yet,
      * `null` when it is held or when the service is not applied. A ref only,
@@ -166,8 +166,8 @@ export declare function orgPlatformReadinessFrom(platform: DeclaredPlatform, pla
 heldRefs?: ReadonlySet<string>, 
 /** True when the host wired no held-keys reader ({@link OrgPlatformReadiness.noKeyReader}). */
 noKeyReader?: boolean, 
-/** #317: true when the host's executor was built with a `NamesPort` ({@link OrgPlatformReadiness.namesReady}). */
-namesPortPresent?: boolean): OrgPlatformReadiness;
+/** #317: true when the host's executor was built with an `EdgePort` ({@link OrgPlatformReadiness.edgeReady}). */
+edgePortPresent?: boolean): OrgPlatformReadiness;
 /**
  * #177: {@link AgoraHostValues} derived from the same platform state, rather
  * than requiring a bespoke host-supplied `AgoraHostPort` for values the

package/dist/plan/platform-org.js

@@ -1,4 +1,4 @@
-import { JOBS_SCHEDULER_KEY, PLATFORM_AI_INTERNAL_URL_SCOPE_KEY, PLATFORM_AI_KEY, PLATFORM_AUTH_KEY, PLATFORM_FILES_INTERNAL_URL_SCOPE_KEY, PLATFORM_FILES_KEY, PLATFORM_MAIL_INTERNAL_URL_SCOPE_KEY, PLATFORM_MAIL_KEY, PLATFORM_MAIL_ZITADEL_PROJECT_SCOPE_KEY, PLATFORM_NAMES_KEY, platformMailMxHost, } from './platform-diff.js';
+import { JOBS_SCHEDULER_KEY, PLATFORM_AI_INTERNAL_URL_SCOPE_KEY, PLATFORM_AI_KEY, PLATFORM_AUTH_KEY, PLATFORM_EDGE_KEY, PLATFORM_FILES_INTERNAL_URL_SCOPE_KEY, PLATFORM_FILES_KEY, PLATFORM_MAIL_INTERNAL_URL_SCOPE_KEY, PLATFORM_MAIL_KEY, PLATFORM_MAIL_ZITADEL_PROJECT_SCOPE_KEY, platformMailMxHost, } from './platform-diff.js';
 import { FILES_MANAGEMENT_KEY_REF, JOBS_ADMIN_TOKEN_REF, PLATFORM_AI_MANAGEMENT_KEY_REF, } from './platform-providers.js';
 /**
  * #443: the no-domain company mail apex -- `<slug>.oikos.host`, the same
@@ -32,7 +32,7 @@ export const DEFAULT_ORG_PLATFORM_READINESS = {
     callsReady: false,
     authReady: false,
     jobsReady: false,
-    namesReady: false,
+    edgeReady: false,
     missingKeys: { files: null, ai: null, jobs: null },
 };
 /** The held-key refs an org step needs from the platform, one per service. */
@@ -80,13 +80,13 @@ export function orgPlatformReadinessFrom(platform, platformRecordedIds,
 heldRefs, 
 /** True when the host wired no held-keys reader ({@link OrgPlatformReadiness.noKeyReader}). */
 noKeyReader = false, 
-/** #317: true when the host's executor was built with a `NamesPort` ({@link OrgPlatformReadiness.namesReady}). */
-namesPortPresent = false) {
+/** #317: true when the host's executor was built with an `EdgePort` ({@link OrgPlatformReadiness.edgeReady}). */
+edgePortPresent = false) {
     const mailApplied = platform.mail.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_MAIL_KEY);
     const filesApplied = platform.files.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_FILES_KEY);
     const aiApplied = platform.ai.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_AI_KEY);
     const jobsApplied = platform.jobs.enabled && Boolean(platformRecordedIds[`coolify:jobs:${JOBS_SCHEDULER_KEY}`]);
-    const namesApplied = platform.names.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_NAMES_KEY);
+    const edgeApplied = platform.edge.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_EDGE_KEY);
     const missing = (applied, ref) => applied && heldRefs !== undefined && !heldRefs.has(ref) ? ref : null;
     const missingKeys = {
         files: missing(filesApplied, ORG_PLATFORM_KEY_REFS.files),
@@ -113,8 +113,8 @@ namesPortPresent = false) {
         callsReady: platform.sfu.enabled,
         authReady: platform.auth.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_AUTH_KEY),
         jobsReady: jobsApplied && missingKeys.jobs === null,
-        namesReady: namesApplied && namesPortPresent,
-        namesUrl: namesApplied && namesPortPresent ? `https://${platform.names.hostname}` : null,
+        edgeReady: edgeApplied && edgePortPresent,
+        edgeUrl: edgeApplied && edgePortPresent ? `https://${platform.edge.hostname}` : null,
         missingKeys,
         ...(noKeyReader ? { noKeyReader } : {}),
     };