@wtfalch/foundry 0.61.0 → 0.63.0

package/dist/release/types.d.ts

@@ -51,6 +51,20 @@ export interface ReleaseState {
     signal: ReleaseSignal | null;
     held: string[];
     config: ReleaseConfig;
+    /** The last stage copy request's outcome (`bg.<id>.stagecopy`); absent before the first. */
+    stageCopy?: StageCopyState;
+    /** The last `deploy_stage`: when, whether it worked, and the commit (ok) or the step that failed. */
+    stageDeploy?: {
+        at: string;
+        outcome: 'ok' | 'failed';
+        detail: string;
+    };
+}
+/** C3: what the last `copy_prod_to_stage` or `undo_stage_copy` request did. `detail` is fixed text or an id. */
+export interface StageCopyState {
+    at: string;
+    outcome: 'ok' | 'refused' | 'failed';
+    detail: string;
 }
 export type ReleaseAction = {
     kind: 'promote';
@@ -69,6 +83,12 @@ export type ReleaseAction = {
 } | {
     kind: 'deploy_stage';
     ref: string;
+} | {
+    kind: 'copy_prod_to_stage';
+} | {
+    kind: 'undo_stage_copy';
 };
+/** The requests that run a stage copy. They are handled by the tick's second phase, never by an apply. */
+export declare const isStageCopyAction: (action: ReleaseAction) => boolean;
 export declare const COLORS: readonly Color[];
 export declare function otherColor(color: Color): Color;

package/dist/release/types.js

@@ -1,3 +1,5 @@
+/** The requests that run a stage copy. They are handled by the tick's second phase, never by an apply. */
+export const isStageCopyAction = (action) => action.kind === 'copy_prod_to_stage' || action.kind === 'undo_stage_copy';
 export const COLORS = ['blue', 'green'];
 export function otherColor(color) {
     return color === 'blue' ? 'green' : 'blue';

package/dist/requested-changes.d.ts

@@ -16,7 +16,7 @@ import type { PlanDetail } from './plan/diff.js';
  * lowering or leaving a limit unchanged -- raising either one needs
  * approval too, until a billing field exists to say what the raise costs.
  */
-export type RequestableField = 'calls' | 'customers' | 'storageLimit' | 'aiLimit' | 'domain' | 'mailTier' | 'app' | 'build' | 'bouleApps';
+export type RequestableField = 'calls' | 'customers' | 'storageLimit' | 'aiLimit' | 'domain' | 'mailTier' | 'app' | 'build' | 'bouleApps' | 'kosmos';
 export declare const REQUESTABLE_FIELDS: readonly RequestableField[];
 /** Turn the org's own calls Matrix stack (`org.ts`'s `CallsConfig.enabled`) on or off. */
 export interface CallsChange {
@@ -84,12 +84,21 @@ export interface BouleAppsChange {
     field: 'bouleApps';
     enabled: boolean;
 }
+/**
+ * Turn `org.kosmos.enabled` on or off (`org.ts`'s `KosmosApp.enabled`). On provisions only what kosmos needs
+ * (its ZITADEL client, its database, its live and idle copies) -- auto. Off retires its app, database route and
+ * ZITADEL client (steps marked `destroys: true`), so it always needs a person, same shape as `bouleApps`.
+ */
+export interface KosmosChange {
+    field: 'kosmos';
+    enabled: boolean;
+}
 /**
  * One company-requested change to its own declared org, keyed by
  * {@link RequestableField}. `classifyChange` and the store both switch on
  * `.field`.
  */
-export type RequestedChangeValue = CallsChange | CustomersChange | StorageLimitChange | AiLimitChange | DomainChange | MailTierChange | AppChange | BuildChange | BouleAppsChange;
+export type RequestedChangeValue = CallsChange | CustomersChange | StorageLimitChange | AiLimitChange | DomainChange | MailTierChange | AppChange | BuildChange | BouleAppsChange | KosmosChange;
 /**
  * `auto`: nothing further is required -- archon may carry the request
  * straight into a plan and apply it. `approval`: a human must approve the

package/dist/requested-changes.js

@@ -9,6 +9,7 @@ export const REQUESTABLE_FIELDS = [
     'app',
     'build',
     'bouleApps',
+    'kosmos',
 ];
 /**
  * Thrown by {@link classifyChange} (and by the requested-change store's
@@ -47,6 +48,8 @@ function applyRequestedChange(org, change) {
             return { ...org, mail: { ...org.mail, mode: change.mode } };
         case 'bouleApps':
             return { ...org, boule: { ...org.boule, apps: change.enabled } };
+        case 'kosmos':
+            return { ...org, kosmos: { ...org.kosmos, enabled: change.enabled } };
         case 'app':
         case 'build':
             return org;
@@ -124,8 +127,9 @@ export function classifyChange(org, change, plan) {
         throw new RequestedChangeError(`'${change.field}' is not a requestable field`);
     }
     // Archon validates the whole company for these; nothing waits for approval.
-    if (change.field === 'app' || change.field === 'build')
+    if (change.field === 'app' || change.field === 'build') {
         return 'auto';
+    }
     if (change.field === 'bouleApps') {
         if (typeof change.enabled !== 'boolean') {
             throw new RequestedChangeError('bouleApps needs enabled, true or false');
@@ -134,6 +138,14 @@ export function classifyChange(org, change, plan) {
         // (`destroys: true` steps), so it needs a person whether or not a plan was given.
         return change.enabled ? 'auto' : 'approval';
     }
+    if (change.field === 'kosmos') {
+        if (typeof change.enabled !== 'boolean') {
+            throw new RequestedChangeError('kosmos needs enabled, true or false');
+        }
+        // Turning on provisions only what kosmos needs. Turning off retires its app, database route and
+        // ZITADEL client (`destroys: true` steps), so it needs a person whether or not a plan was given.
+        return change.enabled ? 'auto' : 'approval';
+    }
     if (change.field === 'customers') {
         validateCustomersChange(change);
         // The org after the change must still pass the rule apply checks, for example open registration

package/dist/slug.d.ts

@@ -2,7 +2,7 @@
 export declare const RESERVED_SLUGS: ReadonlySet<string>;
 /** Every platform app, tunnel, project and database name starts `platform-`, so no company slug may. */
 export declare const RESERVED_SLUG_PREFIX = "platform-";
-/** Whether `label` ends in a suffix reserved for another org's own hostname (`-stage`, `-pr-<n>`, `-calls`, `-agora`, `-boule`, `-auth`, `-mail`, `-files`, `-sfu`, `-cms`). */
+/** Whether `label` ends in a suffix reserved for another org's own hostname (`-stage`, `-pr-<n>`, `-calls`, `-agora`, `-boule`, `-kosmos`, `-auth`, `-mail`, `-files`, `-sfu`, `-cms`). */
 export declare function hasBarredSlugSuffix(label: string): boolean;
 /**
  * Why {@link validateSlug} refused a candidate slug, by name so a caller —

package/dist/slug.js

@@ -138,6 +138,14 @@ const AGORA_SUFFIX = /-agora$/;
  * one that opts in.
  */
 const BOULE_SUFFIX = /-boule$/;
+/**
+ * `<something>-kosmos` — a level-1 org's own kosmos hostname
+ * (`<slug>-kosmos.oikos.host`, foundry#949). Kosmos is opt-in, the same way
+ * {@link CALLS_SUFFIX} guards a feature an org can decline: a slug ending
+ * `-kosmos` is only barred because it collides with that one org's own
+ * hostname once kosmos is on, not because every org gets one.
+ */
+const KOSMOS_SUFFIX = /-kosmos$/;
 /** `<something>-auth|-mail|-files|-sfu|-cms` — an own company's service hostnames on oikos.host (`plan/own-hostnames.ts`). */
 const OWN_SERVICE_SUFFIX = /-(auth|mail|files|sfu|cms)$/;
 /**
@@ -151,13 +159,14 @@ const OWN_SERVICE_SUFFIX = /-(auth|mail|files|sfu|cms)$/;
  * `names-`.
  */
 const NAMES_PREFIX = /^names(-|$)/;
-/** Whether `label` ends in a suffix reserved for another org's own hostname (`-stage`, `-pr-<n>`, `-calls`, `-agora`, `-boule`, `-auth`, `-mail`, `-files`, `-sfu`, `-cms`). */
+/** Whether `label` ends in a suffix reserved for another org's own hostname (`-stage`, `-pr-<n>`, `-calls`, `-agora`, `-boule`, `-kosmos`, `-auth`, `-mail`, `-files`, `-sfu`, `-cms`). */
 export function hasBarredSlugSuffix(label) {
     return (STAGE_SUFFIX.test(label) ||
         PR_SUFFIX.test(label) ||
         CALLS_SUFFIX.test(label) ||
         AGORA_SUFFIX.test(label) ||
         BOULE_SUFFIX.test(label) ||
+        KOSMOS_SUFFIX.test(label) ||
         OWN_SERVICE_SUFFIX.test(label));
 }
 /**
@@ -189,7 +198,7 @@ export function validateSlug(slug) {
     if (hasBarredSlugSuffix(slug)) {
         return {
             reason: 'environment-suffix',
-            message: `slug '${slug}' ends with an environment suffix ('-stage', '-pr-<digits>', '-calls', '-agora', '-boule', '-auth', '-mail', '-files', '-sfu' or '-cms') reserved for another org's own hostname (#28, #145, #164, #161) — 'acme-calls' is only legal as acme's calls hostname, 'acme-agora' only as acme's Agora hostname, 'acme-boule' only as acme's Boule hostname, never as an org slug in its own right`,
+            message: `slug '${slug}' ends with an environment suffix ('-stage', '-pr-<digits>', '-calls', '-agora', '-boule', '-kosmos', '-auth', '-mail', '-files', '-sfu' or '-cms') reserved for another org's own hostname (#28, #145, #164, #161, #949) — 'acme-calls' is only legal as acme's calls hostname, 'acme-agora' only as acme's Agora hostname, 'acme-boule' only as acme's Boule hostname, 'acme-kosmos' only as acme's kosmos hostname, never as an org slug in its own right`,
         };
     }
     return null;

package/dist/store/postgres.js

@@ -174,6 +174,17 @@ function rowToOrg(row) {
         ...(row.agoraBlueGreen
             ? { agora: { blueGreen: readBlueGreen(row.agoraBlueGreen, 'agora') } }
             : {}),
+        // Omitted while unset, as `boule`/`agora` are. Validated on read, the same way.
+        ...(row.kosmosBlueGreen || row.kosmosEnabled
+            ? {
+                kosmos: {
+                    ...(row.kosmosBlueGreen
+                        ? { blueGreen: readBlueGreen(row.kosmosBlueGreen, 'kosmos') }
+                        : {}),
+                    ...(row.kosmosEnabled ? { enabled: true } : {}),
+                },
+            }
+            : {}),
         ...(row.versionPin ? { versionPin: readVersionPin(row) } : {}),
         site: { enabled: row.siteEnabled, usesDomain: row.siteUsesDomain },
         hosting: {
@@ -240,6 +251,8 @@ function orgToRow(org) {
         bouleBlueGreen: org.boule?.blueGreen ?? null,
         bouleApps: org.boule?.apps ?? false,
         agoraBlueGreen: org.agora?.blueGreen ?? null,
+        kosmosEnabled: org.kosmos?.enabled ?? false,
+        kosmosBlueGreen: org.kosmos?.blueGreen ?? null,
         servicesOwn: org.services?.own ?? false,
         servicesSfuSlot: org.services?.sfuSlot ?? null,
         versionPin: org.versionPin && Object.keys(org.versionPin).length > 0 ? org.versionPin : null,
@@ -788,6 +801,11 @@ function rowToPlatform(row) {
             hostname: row.hcHostname,
             gitRef: row.hcGitRef,
         },
+        registry: {
+            enabled: row.registryEnabled,
+            hostname: row.registryHostname,
+            gitRef: row.registryGitRef,
+        },
         coolify: {
             enabled: row.coolifyEnabled,
             hostname: row.coolifyHostname,
@@ -837,6 +855,9 @@ function platformToRow(platform) {
         hcEnabled: platform.hc.enabled,
         hcHostname: platform.hc.hostname,
         hcGitRef: platform.hc.gitRef,
+        registryEnabled: platform.registry.enabled,
+        registryHostname: platform.registry.hostname,
+        registryGitRef: platform.registry.gitRef,
         coolifyEnabled: platform.coolify.enabled,
         coolifyHostname: platform.coolify.hostname,
         coolifyGitRef: platform.coolify.gitRef,

package/dist/store/schema.d.ts

@@ -461,6 +461,42 @@ export declare const declaredOrgs: import("drizzle-orm/pg-core").PgTableWithColu
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        kosmosEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: "kosmos_enabled";
+            tableName: "foundry_declared_orgs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        kosmosBlueGreen: import("drizzle-orm/pg-core").PgColumn<{
+            name: "kosmos_blue_green";
+            tableName: "foundry_declared_orgs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: BlueGreenConfig | null;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: BlueGreenConfig | null;
+        }>;
         versionPin: import("drizzle-orm/pg-core").PgColumn<{
             name: "version_pin";
             tableName: "foundry_declared_orgs";
@@ -2256,6 +2292,57 @@ export declare const foundryDeclaredPlatform: import("drizzle-orm/pg-core").PgTa
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        registryEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_enabled";
+            tableName: "foundry_declared_platform";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        registryHostname: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_hostname";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        registryGitRef: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_git_ref";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         coolifyEnabled: import("drizzle-orm/pg-core").PgColumn<{
             name: "coolify_enabled";
             tableName: "foundry_declared_platform";

package/dist/store/schema.js

@@ -48,6 +48,9 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     agoraBlueGreen: jsonb('agora_blue_green').$type(),
     // BouleApp.apps (org.ts): Boule runs apps for the company; `migrations/0063_boule_apps.sql`.
     bouleApps: boolean('boule_apps').notNull().default(false),
+    // KosmosApp (org.ts, foundry#949): the company's own kosmos, set up only when asked; `migrations/0066_org_kosmos.sql`.
+    kosmosEnabled: boolean('kosmos_enabled').notNull().default(false),
+    kosmosBlueGreen: jsonb('kosmos_blue_green').$type(),
     // VersionPin (org.ts): null follows the platform. `migrations/0053_org_version_pin.sql`.
     versionPin: jsonb('version_pin').$type(),
     // SiteConfig (org.ts, T10). A brand new org has no cms site.
@@ -80,6 +83,9 @@ export const declaredOrgs = pgTable('foundry_declared_orgs', {
     hostingRepos: jsonb('hosting_repos').notNull().default([]).$type(),
     // HostingConfig.github (org.ts); migrations/0062. Null: the company has no GitHub App installation.
     hostingGithub: jsonb('hosting_github').$type(),
+    // migrations/0065 added `hosting_native_apps` for foundry#948; foundry#951 dropped the column from
+    // use (Boule owns native settings now, estate#262) but not from the database -- a migration only
+    // adds in this release, since idle and live share one database. The column stays, unread.
     ssoEnabled: boolean('sso_enabled').notNull().default(false),
     guestsEnabled: boolean('guests_enabled').notNull().default(false),
     soloEnabled: boolean('solo_enabled').notNull().default(false),
@@ -213,6 +219,10 @@ export const foundryDeclaredPlatform = pgTable('foundry_declared_platform', {
     hcEnabled: boolean('hc_enabled').notNull().default(false),
     hcHostname: text('hc_hostname').notNull(),
     hcGitRef: text('hc_git_ref').notNull().default(''),
+    /** `migrations/0067_platform_registry.sql`: the platform's image registry. */
+    registryEnabled: boolean('registry_enabled').notNull().default(false),
+    registryHostname: text('registry_hostname').notNull(),
+    registryGitRef: text('registry_git_ref').notNull().default(''),
     /** `migrations/0047_platform_coolify.sql`: the Coolify panel's declared address; foundry never deploys it. */
     coolifyEnabled: boolean('coolify_enabled').notNull().default(false),
     coolifyHostname: text('coolify_hostname').notNull(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.61.0",
+  "version": "0.63.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",
@@ -61,9 +61,10 @@
     "@wtfalch/audit": "0.6.0",
     "@wtfalch/audit-sealing": "npm:@wtfalch/audit@0.14.0",
     "@wtfalch/auth": "^0.26.0",
-    "@wtfalch/edge": "0.15.1",
+    "@wtfalch/edge": "0.23.0",
     "@wtfalch/email": "^0.20.0",
     "@wtfalch/providers": "0.12.0",
+    "bcryptjs": "3.0.3",
     "ssh2": "1.17.0",
     "zod": "4.6.5"
   },

package/versions.digests.json

@@ -6,6 +6,7 @@
   "cloudflared": "sha256:072c067d25ccbe61d46e18f0d0723255f2bb5304f7317caa95b27031520ff92c",
   "stalwart": "sha256:ec011be228596e37e65f41aab17deed573859614430472f7eeb42178c50d87b7",
   "hc": "sha256:aa08a61b0dcfd83f1332eab195d5cec1b595ae076eb8388cadf8a3d597114f9b",
+  "registry": "sha256:01cd312e67026f06f5d89c3e133a4a9adc7cb9eeb9b1194e0b2954dfd770efd2",
   "alpine": "sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1",
   "busybox": "sha256:5cec3fc171c87218698e85a52af7087de727372aae264a787b8112901a5b0092",
   "postgres": "sha256:786dab398303b8ce7cb76b407bb21ef2e4dfbbbd4c6abcf3d29b3130467ffdbc",

package/versions.json

@@ -6,6 +6,7 @@
   "cloudflared": "2026.9.3",
   "stalwart": "v0.16.24",
   "hc": "v4.4",
+  "registry": "3.1.2",
   "alpine": "3.22.1",
   "busybox": "1.37.0-musl",
   "postgres": "16.14-alpine3.22",