@wtfalch/foundry 0.17.1 → 0.19.0

package/dist/plan/platform-diff.js

@@ -698,32 +698,32 @@ export const PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY = 'files_management
 export const PLATFORM_FILES_APPLIED_HOSTNAME_SCOPE_KEY = 'files_applied_hostname';
 export const PLATFORM_FILES_APPLIED_GIT_REF_SCOPE_KEY = 'files_applied_git_ref';
 /**
- * #478: the resource key `planNames` plans under and
+ * #478: the resource key `planEdge` plans under and
  * `FoundryPlatformStepExecutor` dispatches on -- the {@link PLATFORM_FILES_KEY}
- * shape for the names host (https://github.com/wtfalch/names). `runPlatformSteps`
- * records the app's uuid under `coolify:app:platform:names` once the step
- * succeeds, which is what stops `planNames` planning it again.
+ * shape for the edge host (https://github.com/wtfalch/edge). `runPlatformSteps`
+ * records the app's uuid under `coolify:app:platform:edge` once the step
+ * succeeds, which is what stops `planEdge` planning it again.
  */
-export const PLATFORM_NAMES_KEY = 'platform:names';
+export const PLATFORM_EDGE_KEY = 'platform:edge';
 /**
- * #478: the held-key ref the names platform secret's full value is
+ * #478: the held-key ref the edge platform secret's full value is
  * delivered under, once, by {@link FoundryStepExecutorPorts.deliverSecret} --
  * never the host's app env, which gets only its SHA-256 hash
- * (`NAMES_PLATFORM_KEY_HASH`). Archon's own `NamesPort` reads the full
- * secret back from this ref to call names' `mintKey`/`revokeKey`/
+ * (`EDGE_PLATFORM_KEY_HASH`). Archon's own `EdgePort` reads the full
+ * secret back from this ref to call edge' `mintKey`/`revokeKey`/
  * `setReservedLabels`.
  */
-export const PLATFORM_NAMES_KEY_REF = 'names:platform:key';
+export const PLATFORM_EDGE_KEY_REF = 'edge:platform:key';
 /**
- * #478: the held-key ref for names' own Cloudflare API token (tunnel edit +
+ * #478: the held-key ref for edge' own Cloudflare API token (tunnel edit +
  * DNS edit on one account) -- the issue's own "never Archon's token": this
- * is a narrower, names-only credential a human provisions and holds
- * separately from whatever broader token `PlatformNamesDeps.cloudflare`
+ * is a narrower, edge-only credential a human provisions and holds
+ * separately from whatever broader token `PlatformEdgeDeps.cloudflare`
  * uses to stand the host itself up on Coolify.
  */
-export const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = 'cloudflare:names:apiToken';
+export const PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF = 'cloudflare:edge:apiToken';
 /**
- * #478: scope keys (colon-free) for the names platform key, the
+ * #478: scope keys (colon-free) for the edge platform key, the
  * {@link PLATFORM_FILES_MANAGEMENT_UNDELIVERED_SCOPE_KEY} pattern once:
  * the undelivered id is recorded and persisted the moment the secret is
  * minted, before delivery; the guard is recorded only once it was delivered
@@ -731,16 +731,16 @@ export const PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF = 'cloudflare:names:apiToken';
  * means the secret is lost (never kept past that point): the planner
  * reports it and never mints again. Neither key holds the secret itself.
  */
-export const PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = 'names_platform_key_undelivered';
-export const PLATFORM_NAMES_PLATFORM_KEY_SET_SCOPE_KEY = 'names_platform_key_set';
+export const PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY = 'edge_platform_key_undelivered';
+export const PLATFORM_EDGE_PLATFORM_KEY_SET_SCOPE_KEY = 'edge_platform_key_set';
 /**
  * #478: the hostname and `gitRef` the last successful names run applied.
- * `planNames` plans the step again when either differs from the declared
+ * `planEdge` plans the step again when either differs from the declared
  * value; a re-run updates `git_branch` and the runner env and redeploys,
  * and mints no new platform key (the guards above hold).
  */
-export const PLATFORM_NAMES_APPLIED_HOSTNAME_SCOPE_KEY = 'names_applied_hostname';
-export const PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY = 'names_applied_git_ref';
+export const PLATFORM_EDGE_APPLIED_HOSTNAME_SCOPE_KEY = 'edge_applied_hostname';
+export const PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY = 'edge_applied_git_ref';
 /**
  * #167: the platform's own diff engine, mirroring `diff.ts`'s
  * `computePlanDetail` for the one shared {@link DeclaredPlatform} record
@@ -755,7 +755,7 @@ export const PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY = 'names_applied_git_ref';
  * Scope for #167: the frame plus one step, {@link planApexZone}. #173 adds
  * {@link planJobs}, #170 adds {@link planSfu}, #168 adds {@link planAuth},
  * #169 adds {@link planMail}, #174 adds {@link planIntegrations}, #171 adds
- * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planNames}
+ * {@link planFiles}, #172 adds {@link planAi}, #478 adds {@link planEdge}
  * and #175 adds
  * {@link planArchon}, the same way #19 shipped org plan/apply against
  * three singletons before #27, #71, #80 and the rest added the remaining
@@ -805,10 +805,10 @@ export function planPlatform(platform, live, options = {}) {
     const ai = planAi(platform, recordedIds, blocked.ai);
     if (ai.step)
         plannedSteps.push(ai.step);
-    // #478: independent of auth and files -- the names host needs neither.
-    const names = planNames(platform, recordedIds, blocked.names);
-    if (names.step)
-        plannedSteps.push(names.step);
+    // #478: independent of auth and files -- the edge host needs neither.
+    const edge = planEdge(platform, recordedIds, blocked.edge);
+    if (edge.step)
+        plannedSteps.push(edge.step);
     // #175: last, on purpose. Archon's sign-in client lives in the sign-in
     // `planAuth` builds, and its env reads what every other service's step
     // records or delivers, so in one apply it runs after all of them.
@@ -842,9 +842,9 @@ export function planPlatform(platform, live, options = {}) {
         integrations.blocked
             ? null
             : versionChangeLine('integrations', recordedIds[PLATFORM_INTEGRATIONS_APPLIED_GITREF_SCOPE_KEY], platform.integrations.gitRef, 'git ref, redeploy'),
-        names.blocked
+        edge.blocked
             ? null
-            : versionChangeLine('names', recordedIds[PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY], platform.names.gitRef, 'git ref, redeploy'),
+            : versionChangeLine('edge', recordedIds[PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY], platform.edge.gitRef, 'git ref, redeploy'),
         auth.blocked
             ? null
             : versionNotAppliedLine('zitadel', Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_AUTH_KEY)]), recordedIds[PLATFORM_AUTH_ZITADEL_APPLIED_IMAGE_TAG_SCOPE_KEY], VERSIONS.zitadel),
@@ -876,8 +876,8 @@ export function planPlatform(platform, live, options = {}) {
         unmanaged.push({ description: files.blocked, key: 'files' });
     if (ai.blocked)
         unmanaged.push({ description: ai.blocked, key: 'ai' });
-    if (names.blocked)
-        unmanaged.push({ description: names.blocked, key: 'names' });
+    if (edge.blocked)
+        unmanaged.push({ description: edge.blocked, key: 'edge' });
     if (archon.blocked)
         unmanaged.push({ description: archon.blocked, key: 'archon' });
     // #398: the old integrations key stays pinned until Archon holds the new
@@ -1747,13 +1747,13 @@ function planFiles(platform, recordedIds, executorBlocked, authReady, drifted) {
     };
 }
 /**
- * #478: the names host (https://github.com/wtfalch/names) -- its database
+ * #478: the edge host (https://github.com/wtfalch/edge) -- its database
  * (owner and runtime roles), its one Coolify app (no separate migrate app:
  * the Dockerfile migrates inside the runner's own entrypoint, see
- * `provisionPlatformNames`'s own doc comment), foundry's own platform key
+ * `provisionPlatformEdge`'s own doc comment), foundry's own platform key
  * (minted once, its hash alone written to the runner) and a Cloudflare
- * tunnel + DNS record at `platform.names.hostname`. One `coolify:app` step
- * keyed {@link PLATFORM_NAMES_KEY}, the {@link planFiles} bundling shape,
+ * tunnel + DNS record at `platform.edge.hostname`. One `coolify:app` step
+ * keyed {@link PLATFORM_EDGE_KEY}, the {@link planFiles} bundling shape,
  * public like {@link planMail}/{@link planAuth} rather than internal-only
  * like {@link planFiles}/{@link planAi}.
  *
@@ -1764,23 +1764,23 @@ function planFiles(platform, recordedIds, executorBlocked, authReady, drifted) {
  *
  * Blocked, not planned: a platform key minted but never delivered (lost,
  * `ServiceError`-free the way {@link planFiles}'s own management-key check
- * is), or `executorBlocked` -- the host built no names dependencies, or
+ * is), or `executorBlocked` -- the host built no edge dependencies, or
  * (CLAUDE.md's "Human steps") no Cloudflare API token is held yet under
- * {@link PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF}.
+ * {@link PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF}.
  */
-function planNames(platform, recordedIds, executorBlocked) {
-    if (!platform.names.enabled)
+function planEdge(platform, recordedIds, executorBlocked) {
+    if (!platform.edge.enabled)
         return { step: null, blocked: null };
-    const undelivered = recordedIds[PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY];
-    if (undelivered && !recordedIds[PLATFORM_NAMES_PLATFORM_KEY_SET_SCOPE_KEY]) {
+    const undelivered = recordedIds[PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY];
+    if (undelivered && !recordedIds[PLATFORM_EDGE_PLATFORM_KEY_SET_SCOPE_KEY]) {
         return {
             step: null,
-            blocked: `the names host is blocked, not planned: its platform key (${undelivered}) was minted but never delivered and cannot be shown again; remove the recorded key ${PLATFORM_NAMES_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY} to mint a new one`,
+            blocked: `the edge host is blocked, not planned: its platform key (${undelivered}) was minted but never delivered and cannot be shown again; remove the recorded key ${PLATFORM_EDGE_PLATFORM_KEY_UNDELIVERED_SCOPE_KEY} to mint a new one`,
         };
     }
-    const applied = Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_NAMES_KEY)]) &&
-        recordedIds[PLATFORM_NAMES_APPLIED_HOSTNAME_SCOPE_KEY] === platform.names.hostname &&
-        recordedIds[PLATFORM_NAMES_APPLIED_GIT_REF_SCOPE_KEY] === platform.names.gitRef;
+    const applied = Boolean(recordedIds[resourceKey('coolify', 'app', PLATFORM_EDGE_KEY)]) &&
+        recordedIds[PLATFORM_EDGE_APPLIED_HOSTNAME_SCOPE_KEY] === platform.edge.hostname &&
+        recordedIds[PLATFORM_EDGE_APPLIED_GIT_REF_SCOPE_KEY] === platform.edge.gitRef;
     if (applied)
         return { step: null, blocked: null };
     if (executorBlocked)
@@ -1790,11 +1790,11 @@ function planNames(platform, recordedIds, executorBlocked) {
             action: {
                 system: 'coolify',
                 kind: 'app',
-                key: PLATFORM_NAMES_KEY,
-                desired: { hostname: platform.names.hostname, gitRef: platform.names.gitRef },
+                key: PLATFORM_EDGE_KEY,
+                desired: { hostname: platform.edge.hostname, gitRef: platform.edge.gitRef },
             },
             step: {
-                description: `provision the names host at ${platform.names.hostname}, with its own database and foundry's platform key`,
+                description: `provision the edge host at ${platform.edge.hostname}, with its own database and foundry's platform key`,
                 destroys: false,
                 migrates: false,
             },

package/dist/plan/platform-org-ports.d.ts

@@ -45,6 +45,7 @@ export declare class PlatformOrgPorts {
     files(): Promise<FilesOrganisationPort>;
     ai(): Promise<AiOrganisationPort>;
     jobs(): Promise<JobsSchedulerPort>;
+    authHostname(): Promise<string | null>;
     private recorded;
     private held;
 }

package/dist/plan/platform-org-ports.js

@@ -47,6 +47,9 @@ export class PlatformOrgPorts {
         const token = await this.held('jobs', JOBS_ADMIN_TOKEN_REF);
         return new HttpJobsSchedulerClient(`https://${platform.jobs.hostname}`, token, this.options.fetch);
     }
+    async authHostname() {
+        return (await this.options.store.get())?.auth.hostname ?? null;
+    }
     async recorded(service, scopeKey) {
         const value = (await this.options.store.getServiceIds())[scopeKey];
         if (!value) {

package/dist/plan/platform-org.d.ts

@@ -88,16 +88,16 @@ export interface OrgPlatformReadiness {
     /** The jobs scheduler (#173) is enabled, applied, and its admin token is held. */
     jobsReady: boolean;
     /**
-     * #317 (F7) and #478: the names service is declared `enabled`, its own
-     * `coolify:app` deploy step has applied (`provisionPlatformNames`), and
-     * the host's executor was built with a `NamesPort` -- the same
+     * #317 (F7) and #478: the edge service is declared `enabled`, its own
+     * `coolify:app` deploy step has applied (`provisionPlatformEdge`), and
+     * the host's executor was built with an `EdgePort` -- the same
      * `filesReady`/`aiReady` "declared and applied" shape now that #478 built
      * the deploy step #317 shipped ahead of (this field's own doc comment
      * used to say there was none; N1 is no longer deployed by hand).
      */
-    namesReady: boolean;
-    /** `https://<platform.names.hostname>`, which an entry with `uses.names` gets as `NAMES_URL`. `null` until `namesReady`. */
-    namesUrl?: string | null;
+    edgeReady: boolean;
+    /** `https://<platform.edge.hostname>`, which an entry with `uses.edge` gets as `EDGE_URL`. `null` until `edgeReady`. */
+    edgeUrl?: string | null;
     /**
      * The ref of a platform key an applied service needs that is not held yet,
      * `null` when it is held or when the service is not applied. A ref only,
@@ -166,8 +166,8 @@ export declare function orgPlatformReadinessFrom(platform: DeclaredPlatform, pla
 heldRefs?: ReadonlySet<string>, 
 /** True when the host wired no held-keys reader ({@link OrgPlatformReadiness.noKeyReader}). */
 noKeyReader?: boolean, 
-/** #317: true when the host's executor was built with a `NamesPort` ({@link OrgPlatformReadiness.namesReady}). */
-namesPortPresent?: boolean): OrgPlatformReadiness;
+/** #317: true when the host's executor was built with an `EdgePort` ({@link OrgPlatformReadiness.edgeReady}). */
+edgePortPresent?: boolean): OrgPlatformReadiness;
 /**
  * #177: {@link AgoraHostValues} derived from the same platform state, rather
  * than requiring a bespoke host-supplied `AgoraHostPort` for values the

package/dist/plan/platform-org.js

@@ -1,4 +1,4 @@
-import { JOBS_SCHEDULER_KEY, PLATFORM_AI_INTERNAL_URL_SCOPE_KEY, PLATFORM_AI_KEY, PLATFORM_AUTH_KEY, PLATFORM_FILES_INTERNAL_URL_SCOPE_KEY, PLATFORM_FILES_KEY, PLATFORM_MAIL_INTERNAL_URL_SCOPE_KEY, PLATFORM_MAIL_KEY, PLATFORM_MAIL_ZITADEL_PROJECT_SCOPE_KEY, PLATFORM_NAMES_KEY, platformMailMxHost, } from './platform-diff.js';
+import { JOBS_SCHEDULER_KEY, PLATFORM_AI_INTERNAL_URL_SCOPE_KEY, PLATFORM_AI_KEY, PLATFORM_AUTH_KEY, PLATFORM_EDGE_KEY, PLATFORM_FILES_INTERNAL_URL_SCOPE_KEY, PLATFORM_FILES_KEY, PLATFORM_MAIL_INTERNAL_URL_SCOPE_KEY, PLATFORM_MAIL_KEY, PLATFORM_MAIL_ZITADEL_PROJECT_SCOPE_KEY, platformMailMxHost, } from './platform-diff.js';
 import { FILES_MANAGEMENT_KEY_REF, JOBS_ADMIN_TOKEN_REF, PLATFORM_AI_MANAGEMENT_KEY_REF, } from './platform-providers.js';
 /**
  * #443: the no-domain company mail apex -- `<slug>.oikos.host`, the same
@@ -32,7 +32,7 @@ export const DEFAULT_ORG_PLATFORM_READINESS = {
     callsReady: false,
     authReady: false,
     jobsReady: false,
-    namesReady: false,
+    edgeReady: false,
     missingKeys: { files: null, ai: null, jobs: null },
 };
 /** The held-key refs an org step needs from the platform, one per service. */
@@ -80,13 +80,13 @@ export function orgPlatformReadinessFrom(platform, platformRecordedIds,
 heldRefs, 
 /** True when the host wired no held-keys reader ({@link OrgPlatformReadiness.noKeyReader}). */
 noKeyReader = false, 
-/** #317: true when the host's executor was built with a `NamesPort` ({@link OrgPlatformReadiness.namesReady}). */
-namesPortPresent = false) {
+/** #317: true when the host's executor was built with an `EdgePort` ({@link OrgPlatformReadiness.edgeReady}). */
+edgePortPresent = false) {
     const mailApplied = platform.mail.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_MAIL_KEY);
     const filesApplied = platform.files.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_FILES_KEY);
     const aiApplied = platform.ai.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_AI_KEY);
     const jobsApplied = platform.jobs.enabled && Boolean(platformRecordedIds[`coolify:jobs:${JOBS_SCHEDULER_KEY}`]);
-    const namesApplied = platform.names.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_NAMES_KEY);
+    const edgeApplied = platform.edge.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_EDGE_KEY);
     const missing = (applied, ref) => applied && heldRefs !== undefined && !heldRefs.has(ref) ? ref : null;
     const missingKeys = {
         files: missing(filesApplied, ORG_PLATFORM_KEY_REFS.files),
@@ -113,8 +113,8 @@ namesPortPresent = false) {
         callsReady: platform.sfu.enabled,
         authReady: platform.auth.enabled && coolifyAppApplied(platformRecordedIds, PLATFORM_AUTH_KEY),
         jobsReady: jobsApplied && missingKeys.jobs === null,
-        namesReady: namesApplied && namesPortPresent,
-        namesUrl: namesApplied && namesPortPresent ? `https://${platform.names.hostname}` : null,
+        edgeReady: edgeApplied && edgePortPresent,
+        edgeUrl: edgeApplied && edgePortPresent ? `https://${platform.edge.hostname}` : null,
         missingKeys,
         ...(noKeyReader ? { noKeyReader } : {}),
     };

package/dist/plan/platform-providers.d.ts

@@ -132,11 +132,11 @@ export interface FoundryPlatformStepExecutorOptions {
      */
     ai?: PlatformAiDeps;
     /**
-     * #478: dependencies for `coolify:app` keyed {@link PLATFORM_NAMES_KEY} --
+     * #478: dependencies for `coolify:app` keyed {@link PLATFORM_EDGE_KEY} --
      * optional for the same reason as `auth`; a host that declares
-     * `platform.names.enabled` without it gets the step reported as blocked.
+     * `platform.edge.enabled` without it gets the step reported as blocked.
      */
-    names?: PlatformNamesDeps;
+    edge?: PlatformEdgeDeps;
     /**
      * #175: dependencies for `coolify:app` keyed {@link PLATFORM_ARCHON_KEY}
      * -- optional for the same reason as {@link auth}.
@@ -203,8 +203,8 @@ export interface FoundryPlatformStepExecutorOptions {
  * #172 adds `coolify:app` keyed {@link PLATFORM_AI_KEY}, the platform's AI
  * host ({@link provisionPlatformAi}), once a host passes {@link PlatformAiDeps}.
  *
- * #478 adds `coolify:app` keyed {@link PLATFORM_NAMES_KEY}, the names host
- * ({@link provisionPlatformNames}), once a host passes {@link PlatformNamesDeps}.
+ * #478 adds `coolify:app` keyed {@link PLATFORM_EDGE_KEY}, the edge host
+ * ({@link provisionPlatformEdge}), once a host passes {@link PlatformEdgeDeps}.
  *
  * #175 adds `coolify:app` keyed {@link PLATFORM_ARCHON_KEY}, Archon itself
  * ({@link provisionPlatformArchon}), once a host passes
@@ -225,7 +225,7 @@ export declare class FoundryPlatformStepExecutor implements PlatformStepExecutor
     private readonly integrations?;
     private readonly files?;
     private readonly ai?;
-    private readonly names?;
+    private readonly edge?;
     private readonly archon?;
     private readonly backup?;
     constructor(cloudflare: Pick<CloudflarePort, 'findZoneByApex' | 'createZone'>, declaredOrgStore: Pick<DeclaredOrgStore, 'findOrgIdForZone' | 'list' | 'get'>, options?: FoundryPlatformStepExecutorOptions);
@@ -236,7 +236,7 @@ export declare class FoundryPlatformStepExecutor implements PlatformStepExecutor
         files?: string;
         integrations?: string;
         ai?: string;
-        names?: string;
+        edge?: string;
         archon?: string;
         mail?: string;
         backupExecutorMissing?: boolean;
@@ -428,7 +428,7 @@ export interface PlatformArchonDeps {
     zitadelForInstance?: (issuerUrl: string) => PlatformArchonDeps['zitadel'];
     /**
      * Who the Cloudflare Access app in front of Archon lets through. Host
-     * config, not `DeclaredPlatform`: the platform record names services, not
+     * config, not `DeclaredPlatform`: the platform record edge services, not
      * people. Empty blocks the step (`blockedSteps`) rather than building an
      * Access app nobody can pass.
      */
@@ -640,8 +640,9 @@ export declare const PLATFORM_AI_MANAGEMENT_KEY_REF = "ai:platform:managementKey
  * What Archon's management key may do in ai: exactly `ai`'s own
  * `ARCHON_AI_PERMISSIONS` (`apps/host/scripts/authz/bootstrap-archon.ts`) --
  * configuration only (offerings, provisioning, offers, budgets, usage, cost)
- * plus deleting (archiving) an organisation, never connections, runs or
- * webhooks. ai's `/v1/platform/keys` route refuses any permission outside
+ * plus deleting (archiving) an organisation and setting another
+ * organisation's webhook address and budget, never connections, runs or
+ * webhook deliveries. ai's `/v1/platform/keys` route refuses any permission outside
  * this same list, so a request for more than this is a 403, not a wider key.
  */
 export declare const PLATFORM_AI_MANAGEMENT_PERMISSIONS: readonly string[];
@@ -822,7 +823,7 @@ export declare const FILES_MANAGEMENT_KEY_ID = "foundry-1";
 export declare const FILES_MANAGEMENT_KEY_REF = "files:platform:managementKey";
 /** The ref the files host's introspection client secret is delivered under. */
 export declare const FILES_INTROSPECTION_SECRET_REF = "zitadel:platform:files:introspection";
-export interface PlatformNamesRuntime {
+export interface PlatformEdgeRuntime {
     fetch?: typeof fetch;
     sleep?: (ms: number) => Promise<void>;
     now?: () => number;
@@ -831,17 +832,17 @@ export interface PlatformNamesRuntime {
     readyTimeoutMs?: number;
     readyIntervalMs?: number;
 }
-export interface PlatformNamesDeps {
+export interface PlatformEdgeDeps {
     coolify: Pick<CoolifyPort, 'findProjectByName' | 'createProject' | 'findOrCreateEnvironment' | 'listServers' | 'findApplicationByName' | 'getApplication' | 'requireGithubApp' | 'createGithubAppApplication' | 'createDockerfileApplication' | 'listDatabases' | 'createPostgresDatabase' | 'getDatabase' | 'bulkUpsertEnvs' | 'listEnvs' | 'updateApplication' | 'deploy' | 'deployAndWait' | 'raw'>;
     cloudflare: Pick<CloudflarePort, 'findZoneByApex' | 'findTunnelByName' | 'createTunnel' | 'putTunnelConfig' | 'getTunnelToken' | 'findDnsRecord' | 'createDnsRecord' | 'updateDnsRecord'>;
     deliverSecret: FoundryStepExecutorPorts['deliverSecret'];
     /**
-     * Reads the names service's own Cloudflare API token back, held under
-     * {@link PLATFORM_NAMES_CLOUDFLARE_TOKEN_REF} -- a human step (the issue's
+     * Reads the edge service's own Cloudflare API token back, held under
+     * {@link PLATFORM_EDGE_CLOUDFLARE_TOKEN_REF} -- a human step (the issue's
      * own "Human steps"), never minted here: foundry has no Cloudflare
      * account of its own to carve that token out of. Absent, or with nothing
      * held under that ref yet, is reported blocked by `blockedSteps`
-     * ({@link namesBlockedReason}), never planned to throw.
+     * ({@link edgeBlockedReason}), never planned to throw.
      */
     heldKeys?: {
         resolve(ref: string): Promise<string | null>;
@@ -853,7 +854,7 @@ export interface PlatformNamesDeps {
      */
     cloudflareAccountId?: string;
     /** Clock, sleep and fetch for the readiness wait and delivery retries; real ones by default. */
-    runtime?: PlatformNamesRuntime;
+    runtime?: PlatformEdgeRuntime;
 }
 /**
  * #174: everything {@link provisionPlatformIntegrations} needs beyond