@wtfalch/foundry 0.76.1 → 0.77.0

package/dist/store/schema.d.ts

@@ -1486,7 +1486,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             tableName: "foundry_audit_events";
             dataType: "string";
             columnType: "PgText";
-            data: "apply" | "plan" | "destroy";
+            data: "apply" | "destroy" | "plan";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1498,7 +1498,7 @@ export declare const foundryAuditEvents: import("drizzle-orm/pg-core").PgTableWi
             identity: undefined;
             generated: undefined;
         }, {}, {
-            $type: "apply" | "plan" | "destroy";
+            $type: "apply" | "destroy" | "plan";
         }>;
         actorId: import("drizzle-orm/pg-core").PgColumn<{
             name: "actor_id";
@@ -2500,6 +2500,57 @@ export declare const foundryDeclaredPlatform: import("drizzle-orm/pg-core").PgTa
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        appCanaryEnabled: import("drizzle-orm/pg-core").PgColumn<{
+            name: "app_canary_enabled";
+            tableName: "foundry_declared_platform";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        appCanaryTag: import("drizzle-orm/pg-core").PgColumn<{
+            name: "app_canary_tag";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        appCanarySha256: import("drizzle-orm/pg-core").PgColumn<{
+            name: "app_canary_sha256";
+            tableName: "foundry_declared_platform";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         heartbeatsProvider: import("drizzle-orm/pg-core").PgColumn<{
             name: "heartbeats_provider";
             tableName: "foundry_declared_platform";
@@ -3066,3 +3117,435 @@ export type RequestedChangeRow = typeof foundryRequestedChanges.$inferSelect;
 export type NewRequestedChangeRow = typeof foundryRequestedChanges.$inferInsert;
 export type AppliedVersionRow = typeof foundryAppliedVersions.$inferSelect;
 export type NewAppliedVersionRow = typeof foundryAppliedVersions.$inferInsert;
+/** Mirrors `migrations/0072_audit_host.sql`: a company's audit host key, as its sha256 only. */
+export declare const foundryAuditHostKeys: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_audit_host_keys";
+    schema: undefined;
+    columns: {
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "foundry_audit_host_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        keySha256: import("drizzle-orm/pg-core").PgColumn<{
+            name: "key_sha256";
+            tableName: "foundry_audit_host_keys";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "foundry_audit_host_keys";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+/** Mirrors `migrations/0072_audit_host.sql`: a ledger a company's Boule registered; the password is held, not here. */
+export declare const foundryAuditLedgerRegistrations: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_audit_ledger_registrations";
+    schema: undefined;
+    columns: {
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        entryKey: import("drizzle-orm/pg-core").PgColumn<{
+            name: "entry_key";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        copy: import("drizzle-orm/pg-core").PgColumn<{
+            name: "copy";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        dbHost: import("drizzle-orm/pg-core").PgColumn<{
+            name: "db_host";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        dbPort: import("drizzle-orm/pg-core").PgColumn<{
+            name: "db_port";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        dbName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "db_name";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        dbUser: import("drizzle-orm/pg-core").PgColumn<{
+            name: "db_user";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        sslmode: import("drizzle-orm/pg-core").PgColumn<{
+            name: "sslmode";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        passwordRef: import("drizzle-orm/pg-core").PgColumn<{
+            name: "password_ref";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "foundry_audit_ledger_registrations";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+/** Mirrors `migrations/0072_audit_host.sql`: one seal tick's result for one ledger, kept for 12 hours. */
+export declare const foundryAuditSealResults: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "foundry_audit_seal_results";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "foundry_audit_seal_results";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "foundry_audit_seal_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        entryKey: import("drizzle-orm/pg-core").PgColumn<{
+            name: "entry_key";
+            tableName: "foundry_audit_seal_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        ledger: import("drizzle-orm/pg-core").PgColumn<{
+            name: "ledger";
+            tableName: "foundry_audit_seal_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        outcome: import("drizzle-orm/pg-core").PgColumn<{
+            name: "outcome";
+            tableName: "foundry_audit_seal_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        treeSize: import("drizzle-orm/pg-core").PgColumn<{
+            name: "tree_size";
+            tableName: "foundry_audit_seal_results";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        anchored: import("drizzle-orm/pg-core").PgColumn<{
+            name: "anchored";
+            tableName: "foundry_audit_seal_results";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        erasures: import("drizzle-orm/pg-core").PgColumn<{
+            name: "erasures";
+            tableName: "foundry_audit_seal_results";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        reason: import("drizzle-orm/pg-core").PgColumn<{
+            name: "reason";
+            tableName: "foundry_audit_seal_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        at: import("drizzle-orm/pg-core").PgColumn<{
+            name: "at";
+            tableName: "foundry_audit_seal_results";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;

package/dist/store/schema.js

@@ -1,5 +1,5 @@
 import { sql } from 'drizzle-orm';
-import { bigint, bigserial, boolean, index, integer, jsonb, pgTable, text, timestamp, } from 'drizzle-orm/pg-core';
+import { bigint, bigserial, boolean, index, integer, jsonb, pgTable, primaryKey, text, timestamp, } from 'drizzle-orm/pg-core';
 /**
  * Mirrors `migrations/0001_declared_org.sql`, which is the source of truth:
  * the SQL carries the CHECKs drizzle-kit does not generate here (this
@@ -236,6 +236,10 @@ export const foundryDeclaredPlatform = pgTable('foundry_declared_platform', {
     usageTailEnabled: boolean('usage_tail_enabled').notNull().default(false),
     usageTailTag: text('usage_tail_tag').notNull().default(''),
     usageTailSha256: text('usage_tail_sha256').notNull().default(''),
+    /** foundry#1133, `migrations/0074_platform_app_canary.sql`: the app-layer canary and its artifact pin. */
+    appCanaryEnabled: boolean('app_canary_enabled').notNull().default(false),
+    appCanaryTag: text('app_canary_tag').notNull().default(''),
+    appCanarySha256: text('app_canary_sha256').notNull().default(''),
     /** foundry#544, `migrations/0053_heartbeats_provider.sql`: which Healthchecks instance manages the heartbeat checks, decoupled from `hcEnabled` above. */
     heartbeatsProvider: text('heartbeats_provider').notNull().default('self-hosted'),
     /** `migrations/0018_platform_apply.sql`: the platform's applied state, `system:kind:key` to provider id. */
@@ -290,3 +294,36 @@ export const foundryReleaseEvents = pgTable('foundry_release_events', {
     kind: text('kind').notNull(),
     payload: jsonb('payload').notNull().$type().default({}),
 });
+/** Mirrors `migrations/0072_audit_host.sql`: a company's audit host key, as its sha256 only. */
+export const foundryAuditHostKeys = pgTable('foundry_audit_host_keys', {
+    orgId: text('org_id').primaryKey(),
+    keySha256: text('key_sha256').notNull().unique(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+});
+/** Mirrors `migrations/0072_audit_host.sql`: a ledger a company's Boule registered; the password is held, not here. */
+export const foundryAuditLedgerRegistrations = pgTable('foundry_audit_ledger_registrations', {
+    orgId: text('org_id').notNull(),
+    entryKey: text('entry_key').notNull(),
+    copy: text('copy').notNull(),
+    dbHost: text('db_host').notNull(),
+    dbPort: integer('db_port').notNull(),
+    dbName: text('db_name').notNull(),
+    dbUser: text('db_user').notNull(),
+    sslmode: text('sslmode'),
+    passwordRef: text('password_ref').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+}, (t) => [primaryKey({ columns: [t.orgId, t.entryKey] })]);
+/** Mirrors `migrations/0072_audit_host.sql`: one seal tick's result for one ledger, kept for 12 hours. */
+export const foundryAuditSealResults = pgTable('foundry_audit_seal_results', {
+    id: bigserial('id', { mode: 'number' }).primaryKey(),
+    orgId: text('org_id').notNull(),
+    entryKey: text('entry_key').notNull(),
+    ledger: text('ledger').notNull(),
+    outcome: text('outcome').notNull(),
+    treeSize: integer('tree_size'),
+    anchored: integer('anchored').notNull().default(0),
+    erasures: integer('erasures').notNull().default(0),
+    reason: text('reason'),
+    at: timestamp('at', { withTimezone: true }).notNull(),
+});

package/dist/worker-app-config.js

@@ -196,9 +196,9 @@ export function validateEntryWorkerApp(entry, hosting, names) {
     if (Object.keys(entry.env).length > 0) {
         return `${at} has no Coolify app, so env does not apply: use workerApp.vars or workerApp.secrets`;
     }
-    const unsupported = Object.keys(entry.uses ?? {}).find((use) => use !== 'auth' && use !== 'audit' && use !== 'analytics');
+    const unsupported = Object.keys(entry.uses ?? {}).find((use) => use !== 'auth' && use !== 'audit' && use !== 'analytics' && use !== 'reporting');
     if (unsupported)
-        return `${at} supports uses.auth, uses.audit and uses.analytics only, not uses.${unsupported}`;
+        return `${at} supports uses.auth, uses.audit, uses.analytics and uses.reporting only, not uses.${unsupported}`;
     if (entry.key.length > WORKER_NAME_MAX_LENGTH - WORKER_NAME_FIXED_LENGTH) {
         return `${at} entry key is too long: the deployed Worker's name (an 8-character org hash, the key, and "${WORKER_APP_NAME_SUFFIX}") must fit Cloudflare's ${WORKER_NAME_MAX_LENGTH}-character limit`;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.76.1",
+  "version": "0.77.0",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",