@wtfalch/foundry 0.2.0 → 0.3.0

package/dist/store/postgres.js

@@ -1,5 +1,5 @@
 import { eq, sql } from 'drizzle-orm';
-import { validateBuyerIdentity, validateHosting, validateOwner } from '../org.js';
+import { validateBuyerIdentity, validateHosting, validateOwner, validateSite } from '../org.js';
 import { validateSlug } from '../slug.js';
 import { declaredOrgs, foundryAppliedState, } from './schema.js';
 const UNIQUE_VIOLATION = '23505';
@@ -58,6 +58,7 @@ function rowToOrg(row) {
             gitBranch: row.hostingGitBranch,
             buildPack: row.hostingBuildPack,
             issuerApps: row.hostingIssuerApps,
+            accessEmails: row.hostingAccessEmails,
         },
         sso: { enabled: row.ssoEnabled },
         guests: { enabled: row.guestsEnabled },
@@ -93,6 +94,7 @@ function orgToRow(org) {
         hostingGitBranch: org.hosting.gitBranch,
         hostingBuildPack: org.hosting.buildPack,
         hostingIssuerApps: org.hosting.issuerApps,
+        hostingAccessEmails: org.hosting.accessEmails,
         ssoEnabled: org.sso.enabled,
         guestsEnabled: org.guests.enabled,
         soloEnabled: org.solo.enabled,
@@ -211,6 +213,13 @@ export function createPostgresDeclaredOrgStore(db) {
         if (reason)
             throw new DeclaredOrgError(`hosting invalid: ${reason} (#71)`);
     }
+    // #101: same place `requireValidHosting` checks hosting, on both `create`
+    // and the merged result of `update`.
+    function requireValidSite(org) {
+        const reason = validateSite(org);
+        if (reason)
+            throw new DeclaredOrgError(`site invalid: ${reason} (#101)`);
+    }
     // Same place `requireValidHosting` checks hosting, on both `create` and
     // the merged result of `update`.
     function requireValidOwner(org) {
@@ -224,6 +233,7 @@ export function createPostgresDeclaredOrgStore(db) {
             requireValidLimits(org);
             requireValidBuyer(org);
             requireValidHosting(org);
+            requireValidSite(org);
             requireValidOwner(org);
             try {
                 await db.insert(declaredOrgs).values(orgToRow(org));
@@ -243,6 +253,14 @@ export function createPostgresDeclaredOrgStore(db) {
             const [row] = await db.select().from(declaredOrgs).where(eq(declaredOrgs.id, id)).limit(1);
             return row ? rowToOrg(row) : null;
         },
+        async slugTaken(slug) {
+            const [row] = await db
+                .select({ id: declaredOrgs.id })
+                .from(declaredOrgs)
+                .where(eq(declaredOrgs.slug, slug))
+                .limit(1);
+            return row !== undefined;
+        },
         async update(id, patch) {
             const current = rowToOrg(await requireRow(id));
             // The slug freeze (#7 corrections 3): once mail exists, the mail
@@ -264,6 +282,7 @@ export function createPostgresDeclaredOrgStore(db) {
             requireValidLimits(next);
             requireValidBuyer(next);
             requireValidHosting(next);
+            requireValidSite(next);
             requireValidOwner(next);
             try {
                 await db

package/dist/store/schema.d.ts

@@ -1,4 +1,5 @@
 import type { IssuerApp } from '../org.js';
+import type { Plan } from '../plan.js';
 import type { Checkpoint } from '../state.js';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
@@ -318,6 +319,25 @@ export declare const declaredOrgs: import("drizzle-orm/pg-core").PgTableWithColu
         }, {}, {
             $type: IssuerApp[];
         }>;
+        hostingAccessEmails: import("drizzle-orm/pg-core").PgColumn<{
+            name: "hosting_access_emails";
+            tableName: "foundry_declared_orgs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: string[];
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: string[];
+        }>;
         ssoEnabled: import("drizzle-orm/pg-core").PgColumn<{
             name: "sso_enabled";
             tableName: "foundry_declared_orgs";
@@ -799,7 +819,175 @@ export declare const foundryAppliedState: import("drizzle-orm/pg-core").PgTableW
     };
     dialect: "pg";
 }>;
+/** Mirrors `migrations/0012_audit.sql`, the source of truth (#85). */
+export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_audit_events";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "foundry_audit_events";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        at: import("drizzle-orm/pg-core").PgColumn<{
+            name: "at";
+            tableName: "foundry_audit_events";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        kind: import("drizzle-orm/pg-core").PgColumn<{
+            name: "kind";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: "plan" | "apply" | "destroy";
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: "plan" | "apply" | "destroy";
+        }>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorDisplay: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_display";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        outcome: import("drizzle-orm/pg-core").PgColumn<{
+            name: "outcome";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: "applied" | "refused" | "failed" | "destroyed";
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: "applied" | "refused" | "failed" | "destroyed";
+        }>;
+        reason: import("drizzle-orm/pg-core").PgColumn<{
+            name: "reason";
+            tableName: "foundry_audit_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        plan: import("drizzle-orm/pg-core").PgColumn<{
+            name: "plan";
+            tableName: "foundry_audit_events";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Plan;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Plan;
+        }>;
+    };
+    dialect: "pg";
+}>;
 export type DeclaredOrgRow = typeof declaredOrgs.$inferSelect;
 export type NewDeclaredOrgRow = typeof declaredOrgs.$inferInsert;
 export type AppliedStateRow = typeof foundryAppliedState.$inferSelect;
 export type NewAppliedStateRow = typeof foundryAppliedState.$inferInsert;
+export type AuditEventRow = typeof foundryAuditEvents.$inferSelect;

package/dist/store/schema.js

@@ -1,4 +1,4 @@
-import { boolean, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
+import { bigserial, boolean, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
  * the SQL carries the CHECKs drizzle-kit does not generate here (this
@@ -26,6 +26,7 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     hostingGitBranch: text('hosting_git_branch').notNull().default('main'),
     hostingBuildPack: text('hosting_build_pack').notNull().default('nixpacks'),
     hostingIssuerApps: jsonb('hosting_issuer_apps').notNull().default([]).$type(),
+    hostingAccessEmails: jsonb('hosting_access_emails').notNull().default([]).$type(),
     ssoEnabled: boolean('sso_enabled').notNull().default(false),
     guestsEnabled: boolean('guests_enabled').notNull().default(false),
     soloEnabled: boolean('solo_enabled').notNull().default(false),
@@ -75,3 +76,15 @@ export const foundryAppliedState = pgTable('foundry_applied_state', {
     lastAppliedAt: timestamp('last_applied_at', { withTimezone: true }),
     lastAppliedDeclaredOrgVersion: text('last_applied_declared_org_version'),
 });
+/** Mirrors `migrations/0012_audit.sql`, the source of truth (#85). */
+export const foundryAuditEvents = pgTable('foundry_audit_events', {
+    id: bigserial('id', { mode: 'number' }).primaryKey(),
+    at: timestamp('at', { withTimezone: true }).notNull(),
+    kind: text('kind').notNull().$type(),
+    actorId: text('actor_id').notNull(),
+    actorDisplay: text('actor_display').notNull(),
+    orgId: text('org_id').notNull(),
+    outcome: text('outcome').$type(),
+    reason: text('reason'),
+    plan: jsonb('plan').$type(),
+});

package/dist/store.d.ts

@@ -12,6 +12,8 @@ import type { AppliedState } from './state.js';
 export interface DeclaredOrgStore {
     create(org: DeclaredOrg): Promise<void>;
     get(id: OrgId): Promise<DeclaredOrg | null>;
+    /** Whether any org already holds this slug. `slugFromName` asks it. */
+    slugTaken(slug: string): Promise<boolean>;
     /**
      * Combinations foundry knows are impossible are rejected with a reason
      * (#18 "Done when"), so a caller must be ready for this to throw rather

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",
@@ -28,13 +28,19 @@
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json && mkdir -p dist/migrations && find src/migrations -maxdepth 1 -name '*.sql' -exec cp {} dist/migrations/ \\;",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run"
+    "test": "vitest run",
+    "db:provision": "node scripts/foundry-db-provision.mjs",
+    "db:migrate": "node scripts/foundry-db-migrate.mjs",
+    "calls-sfu:deploy": "node scripts/calls-sfu-deploy.mjs"
   },
   "peerDependencies": {
     "drizzle-orm": ">=0.45.2"
   },
   "dependencies": {
-    "@wtfalch/providers": "0.5.0"
+    "@wtfalch/auth": "0.16.0",
+    "@wtfalch/email": "0.15.0",
+    "@wtfalch/providers": "0.5.0",
+    "ssh2": "1.17.0"
   },
   "devDependencies": {
     "@electric-sql/pglite": "^0.5.8",