@wtfalch/foundry 0.67.0 → 0.68.0

package/dist/build-json.d.ts

@@ -5,6 +5,17 @@ import { type WorkerAppConfig } from './worker-app-config.js';
  * app. Same shapes as `WorkerAppConfig`; `repo` and `commit` say where the build came from.
  * Whether `artifactUrl` is an asset of that release is checked by the reader that fetched it.
  */
+/**
+ * A container's image in a build.json: a registry image (`repository` and `digest`), or an asset of the
+ * release (`asset` is the file name, `sha256` its hex digest) that the reader resolves to a registry image.
+ */
+export type BuildJsonContainerImage = NonNullable<WorkerAppConfig['containers']>[number]['image'] | {
+    asset: string;
+    sha256: string;
+};
+export type BuildJsonContainer = Omit<NonNullable<WorkerAppConfig['containers']>[number], 'image'> & {
+    image: BuildJsonContainerImage;
+};
 export interface BuildJson {
     repo: string;
     commit: string;
@@ -13,7 +24,11 @@ export interface BuildJson {
     compatibilityDate?: string;
     compatibilityFlags?: 'nodejs_compat'[];
     durableObjects: WorkerAppConfig['durableObjects'];
-    containers?: WorkerAppConfig['containers'];
+    containers?: BuildJsonContainer[];
+    /** Cloudflare cron triggers: at most 3 standard five-field cron expressions, each once. */
+    triggers?: {
+        crons: string[];
+    };
     migrationsSha256?: string;
 }
 export type BuildJsonErrorCode = 'unknown_field' | 'missing_field' | 'wrong_type' | 'not_https' | 'bad_sha256';

package/dist/build-json.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
+import { workerAppCronProblem } from './entry-rules.js';
 import { ENTRY_IMAGE_REPOSITORY } from './org.js';
-import { WORKER_APP_COMPATIBILITY_FLAGS, WORKER_APP_INSTANCE_TYPES, WORKER_APP_MAX_INSTANCES, } from './worker-app-config.js';
+import { WORKER_APP_COMPATIBILITY_FLAGS, WORKER_APP_CRONS_MAX, WORKER_APP_INSTANCE_TYPES, WORKER_APP_MAX_INSTANCES, } from './worker-app-config.js';
 /** Thrown by {@link parseBuildJson}. `path` is dotted into the build.json; the message never carries a value. */
 export class BuildJsonError extends Error {
     code;
@@ -39,15 +40,29 @@ const durableObjects = z.strictObject({
 });
 const container = z.strictObject({
     className: z.string(),
-    image: z.strictObject({
-        repository: z.string(),
-        digest: z.string().regex(DIGEST, { message: 'wrong_type' }),
-    }),
+    image: z.union([
+        z.strictObject({
+            repository: z.string(),
+            digest: z.string().regex(DIGEST, { message: 'wrong_type' }),
+        }),
+        z.strictObject({ asset: text, sha256 }),
+    ]),
     instanceType: z.string().refine((v) => WORKER_APP_INSTANCE_TYPES.has(v), {
         message: 'wrong_type',
     }),
     maxInstances: z.number().int().min(1).max(WORKER_APP_MAX_INSTANCES),
 });
+const cron = z.string().superRefine((value, ctx) => {
+    if (workerAppCronProblem(value) !== null)
+        ctx.addIssue({ code: 'custom', message: 'wrong_type' });
+});
+const triggers = z
+    .strictObject({ crons: z.array(cron).max(WORKER_APP_CRONS_MAX) })
+    .superRefine((value, ctx) => {
+    if (new Set(value.crons).size !== value.crons.length) {
+        ctx.addIssue({ code: 'custom', path: ['crons'], message: 'wrong_type' });
+    }
+});
 export const buildJsonSchema = z.strictObject({
     repo: text,
     commit: text,
@@ -59,6 +74,7 @@ export const buildJsonSchema = z.strictObject({
         .optional(),
     durableObjects,
     containers: z.array(container).optional(),
+    triggers: triggers.optional(),
     migrationsSha256: sha256.optional(),
 });
 function valueAt(input, path) {

package/dist/modules/assistants.js

@@ -39,8 +39,8 @@ export const assistants = {
     },
     check(values, modules) {
         const signIn = modules['sign-in'];
-        if (signIn?.users !== 'customers' || signIn?.registration !== 'open') {
-            return problem(null, 'Help for AI assistants needs Sign-in for your customers, where anyone can make an account: each customer connects their own assistant. In Sign-in, choose "Your customers" and "Anyone".');
+        if (signIn?.users !== 'customers') {
+            return problem(null, 'Help for AI assistants needs Sign-in for your customers: each customer connects their own assistant. In Sign-in, choose "Your customers". They can sign up themselves or be invited.');
         }
         const onboarding = text(values, 'onboardingPath');
         if (onboarding !== undefined && !isPagePath(onboarding)) {

package/dist/org.js

@@ -922,8 +922,8 @@ function validateEntryAuth(entry, hosting, domain) {
         return refusal('auth_needs_exact_hostname', `hosting.entries.${entry.key}.hostnames`, `${at} needs an exact hostname to sign in at`);
     }
     if (auth.mcp !== undefined) {
-        if (auth.users !== 'customers' || auth.registration !== 'open') {
-            return refusal('mcp_needs_open_customers', `hosting.entries.${entry.key}.uses.auth.mcp`, `${at} mcp needs users 'customers' and registration 'open': an MCP client signs the customer in, and only customers register themselves`);
+        if (auth.users !== 'customers') {
+            return refusal('mcp_needs_open_customers', `hosting.entries.${entry.key}.uses.auth.mcp`, `${at} mcp needs users 'customers': an MCP client signs the customer in, and registration may be open or closed`);
         }
         if (typeof auth.mcp?.path !== 'string' ||
             !MCP_PATH.test(auth.mcp.path) ||

package/dist/plan/blue-green.d.ts

@@ -379,6 +379,12 @@ export interface PlanBlueGreenInput {
         probes: boolean;
         access: boolean;
     };
+    /**
+     * The platform's own company (`DeclaredPlatform.ownerOrgId`). Boule and Agora are our own products,
+     * so they plan blue/green only for this company (#1019); any other company keeps them as one plain
+     * app instead. Absent: not gated, for a caller with no platform in scope.
+     */
+    ownerOrgId?: string | null;
 }
 /**
  * Plans the blue/green parts of an org: per usable server, one structure step (the apps, the balancer, the

package/dist/plan/blue-green.js

@@ -589,6 +589,13 @@ export function planBlueGreen(input) {
             description: `${org.slug}'s ${id} app blue/green is blocked, not planned: ${why}`,
             key: `bg:${id}:${part}`,
         });
+        if (input.ownerOrgId !== undefined &&
+            builtin &&
+            (id === 'boule' || id === 'agora') &&
+            org.id !== input.ownerOrgId) {
+            blocked("only the platform's own company runs Boule and Agora blue/green; it runs as one plain app", 'owner');
+            continue;
+        }
         if (entry?.buildPack === 'dockercompose')
             continue;
         if (colorAppName(subject.base, 'green').length > MAX_NAME) {

package/dist/plan/diff.js

@@ -571,6 +571,7 @@ export function computePlanDetail(declaredOrg, live, recordedIds = {}, agoraHost
         servers: options.blueGreenServers,
         canHoldSecrets: platformReadiness.canHoldSecrets === true,
         accessProviderId: platformReadiness.accessProviderId ?? null,
+        ownerOrgId: platformReadiness.platformOwnerOrgId,
         ...(options.stageSinkDown ? { stageSinkDown: true } : {}),
         ...(options.stageGuardPorts ? { stageGuardPorts: options.stageGuardPorts } : {}),
         appPlanned: (entryKey) => plannedSteps.some((p) => p.action.system === 'coolify' &&

package/dist/plan/plan-apply.js

@@ -1179,7 +1179,12 @@ export class FoundryPlanApply {
         const primaryUuid = context.recordedIds()[PRIMARY_SERVER_SCOPE_KEY];
         if (!store || !this.executor.releaseHost || !primaryUuid)
             return out;
-        const subjects = blueGreenSubjects(org, context.recordedIds());
+        // #1019: Boule and Agora are our own products, so their blue/green release only runs for the
+        // platform's own company; any other company's declaration was never planned as a structure, and a
+        // leftover one is not run here either.
+        const declaredPlatform = await this.platformDeps?.store.get();
+        const ownerOrgId = declaredPlatform?.ownerOrgId ?? null;
+        const subjects = blueGreenSubjects(org, context.recordedIds()).filter((s) => (s.builtin !== 'boule' && s.builtin !== 'agora') || ownerOrgId === org.id);
         // A copy waits while any subject of the org has a release running: the runner must stay free to roll back.
         if (copies === 'claim' && releaseRunning(subjects, context.recordedIds()))
             return out;

package/dist/plan/platform-providers.js

@@ -2147,6 +2147,13 @@ export async function provisionAuthStack(scope, deps, target, input) {
     const heldMailKey = await deps.heldKeys?.resolve(target.refs.brokerMailKey);
     if (heldMailKey)
         runtime.onSecret?.(heldMailKey);
+    // Auth 0.35.0: the login app mails verification and invite codes itself (it throws without
+    // `LETTERMINT_API_TOKEN` and sends nothing without `LOGIN_MAIL_FROM`). Both the login and the
+    // in-app login app read `loginEnvs`, so both get the held key and this stack's sender address.
+    if (heldMailKey)
+        loginEnvs.push({ key: 'LETTERMINT_API_TOKEN', value: heldMailKey });
+    if (input.smtpSender)
+        loginEnvs.push({ key: 'LOGIN_MAIL_FROM', value: input.smtpSender });
     // `AUTH_APPS` and `ZITADEL_SERVICE_USER_TOKEN`/`_FILE` are not pushed here
     // -- this function's own doc comment, "Known gaps". `LETTERMINT_API_TOKEN`
     // is, once held (#210): pushing it costs nothing even while the broker

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.67.0",
+  "version": "0.68.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",