@wtfalch/foundry 0.62.0 → 0.63.0

package/dist/release/types.d.ts

@@ -51,6 +51,20 @@ export interface ReleaseState {
     signal: ReleaseSignal | null;
     held: string[];
     config: ReleaseConfig;
+    /** The last stage copy request's outcome (`bg.<id>.stagecopy`); absent before the first. */
+    stageCopy?: StageCopyState;
+    /** The last `deploy_stage`: when, whether it worked, and the commit (ok) or the step that failed. */
+    stageDeploy?: {
+        at: string;
+        outcome: 'ok' | 'failed';
+        detail: string;
+    };
+}
+/** C3: what the last `copy_prod_to_stage` or `undo_stage_copy` request did. `detail` is fixed text or an id. */
+export interface StageCopyState {
+    at: string;
+    outcome: 'ok' | 'refused' | 'failed';
+    detail: string;
 }
 export type ReleaseAction = {
     kind: 'promote';
@@ -69,6 +83,12 @@ export type ReleaseAction = {
 } | {
     kind: 'deploy_stage';
     ref: string;
+} | {
+    kind: 'copy_prod_to_stage';
+} | {
+    kind: 'undo_stage_copy';
 };
+/** The requests that run a stage copy. They are handled by the tick's second phase, never by an apply. */
+export declare const isStageCopyAction: (action: ReleaseAction) => boolean;
 export declare const COLORS: readonly Color[];
 export declare function otherColor(color: Color): Color;

package/dist/release/types.js

@@ -1,3 +1,5 @@
+/** The requests that run a stage copy. They are handled by the tick's second phase, never by an apply. */
+export const isStageCopyAction = (action) => action.kind === 'copy_prod_to_stage' || action.kind === 'undo_stage_copy';
 export const COLORS = ['blue', 'green'];
 export function otherColor(color) {
     return color === 'blue' ? 'green' : 'blue';

package/dist/requested-changes.d.ts

@@ -16,7 +16,7 @@ import type { PlanDetail } from './plan/diff.js';
  * lowering or leaving a limit unchanged -- raising either one needs
  * approval too, until a billing field exists to say what the raise costs.
  */
-export type RequestableField = 'calls' | 'customers' | 'storageLimit' | 'aiLimit' | 'domain' | 'mailTier' | 'app' | 'build' | 'bouleApps';
+export type RequestableField = 'calls' | 'customers' | 'storageLimit' | 'aiLimit' | 'domain' | 'mailTier' | 'app' | 'build' | 'bouleApps' | 'kosmos';
 export declare const REQUESTABLE_FIELDS: readonly RequestableField[];
 /** Turn the org's own calls Matrix stack (`org.ts`'s `CallsConfig.enabled`) on or off. */
 export interface CallsChange {
@@ -84,12 +84,21 @@ export interface BouleAppsChange {
     field: 'bouleApps';
     enabled: boolean;
 }
+/**
+ * Turn `org.kosmos.enabled` on or off (`org.ts`'s `KosmosApp.enabled`). On provisions only what kosmos needs
+ * (its ZITADEL client, its database, its live and idle copies) -- auto. Off retires its app, database route and
+ * ZITADEL client (steps marked `destroys: true`), so it always needs a person, same shape as `bouleApps`.
+ */
+export interface KosmosChange {
+    field: 'kosmos';
+    enabled: boolean;
+}
 /**
  * One company-requested change to its own declared org, keyed by
  * {@link RequestableField}. `classifyChange` and the store both switch on
  * `.field`.
  */
-export type RequestedChangeValue = CallsChange | CustomersChange | StorageLimitChange | AiLimitChange | DomainChange | MailTierChange | AppChange | BuildChange | BouleAppsChange;
+export type RequestedChangeValue = CallsChange | CustomersChange | StorageLimitChange | AiLimitChange | DomainChange | MailTierChange | AppChange | BuildChange | BouleAppsChange | KosmosChange;
 /**
  * `auto`: nothing further is required -- archon may carry the request
  * straight into a plan and apply it. `approval`: a human must approve the

package/dist/requested-changes.js

@@ -9,6 +9,7 @@ export const REQUESTABLE_FIELDS = [
     'app',
     'build',
     'bouleApps',
+    'kosmos',
 ];
 /**
  * Thrown by {@link classifyChange} (and by the requested-change store's
@@ -47,6 +48,8 @@ function applyRequestedChange(org, change) {
             return { ...org, mail: { ...org.mail, mode: change.mode } };
         case 'bouleApps':
             return { ...org, boule: { ...org.boule, apps: change.enabled } };
+        case 'kosmos':
+            return { ...org, kosmos: { ...org.kosmos, enabled: change.enabled } };
         case 'app':
         case 'build':
             return org;
@@ -135,6 +138,14 @@ export function classifyChange(org, change, plan) {
         // (`destroys: true` steps), so it needs a person whether or not a plan was given.
         return change.enabled ? 'auto' : 'approval';
     }
+    if (change.field === 'kosmos') {
+        if (typeof change.enabled !== 'boolean') {
+            throw new RequestedChangeError('kosmos needs enabled, true or false');
+        }
+        // Turning on provisions only what kosmos needs. Turning off retires its app, database route and
+        // ZITADEL client (`destroys: true` steps), so it needs a person whether or not a plan was given.
+        return change.enabled ? 'auto' : 'approval';
+    }
     if (change.field === 'customers') {
         validateCustomersChange(change);
         // The org after the change must still pass the rule apply checks, for example open registration

package/dist/store/postgres.js

@@ -801,6 +801,11 @@ function rowToPlatform(row) {
             hostname: row.hcHostname,
             gitRef: row.hcGitRef,
         },
+        registry: {
+            enabled: row.registryEnabled,
+            hostname: row.registryHostname,
+            gitRef: row.registryGitRef,
+        },
         coolify: {
             enabled: row.coolifyEnabled,
             hostname: row.coolifyHostname,
@@ -850,6 +855,9 @@ function platformToRow(platform) {
         hcEnabled: platform.hc.enabled,
         hcHostname: platform.hc.hostname,
         hcGitRef: platform.hc.gitRef,
+        registryEnabled: platform.registry.enabled,
+        registryHostname: platform.registry.hostname,
+        registryGitRef: platform.registry.gitRef,
         coolifyEnabled: platform.coolify.enabled,
         coolifyHostname: platform.coolify.hostname,
         coolifyGitRef: platform.coolify.gitRef,

package/dist/store/schema.d.ts

@@ -2292,6 +2292,57 @@ export declare const foundryDeclaredPlatform: import("drizzle-orm/pg-core").PgTa
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        registryEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_enabled";
+            tableName: "foundry_declared_platform";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        registryHostname: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_hostname";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        registryGitRef: import("drizzle-orm/pg-core").PgColumn<{
+            name: "registry_git_ref";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         coolifyEnabled: import("drizzle-orm/pg-core").PgColumn<{
             name: "coolify_enabled";
             tableName: "foundry_declared_platform";

package/dist/store/schema.js

@@ -219,6 +219,10 @@ export const foundryDeclaredPlatform = pgTable('foundry_declared_platform', {
     hcEnabled: boolean('hc_enabled').notNull().default(false),
     hcHostname: text('hc_hostname').notNull(),
     hcGitRef: text('hc_git_ref').notNull().default(''),
+    /** `migrations/0067_platform_registry.sql`: the platform's image registry. */
+    registryEnabled: boolean('registry_enabled').notNull().default(false),
+    registryHostname: text('registry_hostname').notNull(),
+    registryGitRef: text('registry_git_ref').notNull().default(''),
     /** `migrations/0047_platform_coolify.sql`: the Coolify panel's declared address; foundry never deploys it. */
     coolifyEnabled: boolean('coolify_enabled').notNull().default(false),
     coolifyHostname: text('coolify_hostname').notNull(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.62.0",
+  "version": "0.63.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",
@@ -61,9 +61,10 @@
     "@wtfalch/audit": "0.6.0",
     "@wtfalch/audit-sealing": "npm:@wtfalch/audit@0.14.0",
     "@wtfalch/auth": "^0.26.0",
-    "@wtfalch/edge": "0.21.0",
+    "@wtfalch/edge": "0.23.0",
     "@wtfalch/email": "^0.20.0",
     "@wtfalch/providers": "0.12.0",
+    "bcryptjs": "3.0.3",
     "ssh2": "1.17.0",
     "zod": "4.6.5"
   },

package/versions.digests.json

@@ -6,6 +6,7 @@
   "cloudflared": "sha256:072c067d25ccbe61d46e18f0d0723255f2bb5304f7317caa95b27031520ff92c",
   "stalwart": "sha256:ec011be228596e37e65f41aab17deed573859614430472f7eeb42178c50d87b7",
   "hc": "sha256:aa08a61b0dcfd83f1332eab195d5cec1b595ae076eb8388cadf8a3d597114f9b",
+  "registry": "sha256:01cd312e67026f06f5d89c3e133a4a9adc7cb9eeb9b1194e0b2954dfd770efd2",
   "alpine": "sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1",
   "busybox": "sha256:5cec3fc171c87218698e85a52af7087de727372aae264a787b8112901a5b0092",
   "postgres": "sha256:786dab398303b8ce7cb76b407bb21ef2e4dfbbbd4c6abcf3d29b3130467ffdbc",

package/versions.json

@@ -6,6 +6,7 @@
   "cloudflared": "2026.9.3",
   "stalwart": "v0.16.24",
   "hc": "v4.4",
+  "registry": "3.1.2",
   "alpine": "3.22.1",
   "busybox": "1.37.0-musl",
   "postgres": "16.14-alpine3.22",