gencow 0.1.210 → 0.1.211

package/lib/project-migration-manifest.mjs

@@ -36,6 +36,10 @@ function projectSchemaSourcePaths({
     const missing = declared.filter((pathValue) => !existsSyncImpl(pathValue));
     if (missing.length > 0) throw new Error("Configured schema source is missing from the project");
   }
+  // An explicit schema list is the customer's immutable migration contract.
+  // Deploy codegen may materialize a compatibility auth schema later in the
+  // same workspace; it must not silently widen that declared contract.
+  if (config?.schema) return declared.filter((pathValue) => existsSyncImpl(pathValue));
   return resolveDrizzleSchemaPaths(config ?? { rootDir: backendDir }, {
     cwd,
     existsSyncImpl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.210",
+  "version": "0.1.211",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {
@@ -34,8 +34,8 @@
     "@types/node": "^25.9.5",
     "better-auth": "^1.6.23",
     "@gencow/core": "0.1.43",
-    "@gencow/client": "0.2.6",
-    "@gencow/react": "0.2.6"
+    "@gencow/react": "0.2.6",
+    "@gencow/client": "0.2.6"
   },
   "scripts": {
     "prebuild": "pnpm --filter @gencow/migration-contract run build && pnpm --filter @gencow/server run build",

package/runtime/server.mjs

@@ -9660,7 +9660,13 @@ var init_deployment_executor_authority_contract = __esm({
       objectAuthority("app_runtime_activity_state", ["SELECT", "INSERT", "UPDATE"]),
       objectAuthority("app_runtime_activity_observers", ["SELECT", "INSERT", "UPDATE", "DELETE"]),
       objectAuthority("app_runtime_activity_leases", ["SELECT", "INSERT", "UPDATE", "DELETE"]),
-      objectAuthority("runtime_drain_requests", ["SELECT"]),
+      // runtime_stop_intents is owned by the public runtime role and references a
+      // drain request. PostgreSQL's FK check takes a KEY SHARE lock, which needs
+      // UPDATE authority on one referenced column. Constrain that capability to
+      // the immutable drain-request identity.
+      objectAuthority("runtime_drain_requests", ["SELECT"], {
+        columnPrivileges: [{ columns: ["id"], privileges: ["UPDATE"] }]
+      }),
       // The public Platform owns node heartbeat, readiness, capacity admission,
       // and authenticated node administration. These are system-plane data
       // mutations, not lifecycle execution authority.
@@ -185372,7 +185378,8 @@ function fleetSelection() {
   return {
     ...bindingSelection(),
     authorityMode: appRuntimeDesiredState.authorityMode,
-    desiredRuntimeState: appRuntimeDesiredState.desiredRuntimeState
+    desiredRuntimeState: appRuntimeDesiredState.desiredRuntimeState,
+    hasBackend: apps.hasBackend
   };
 }
 function queryBindingRows(db) {
@@ -185424,6 +185431,7 @@ function fleetAuthorityDigest(rows4) {
     row.appId,
     row.appName,
     row.authorityMode,
+    row.hasBackend,
     row.desiredActivationId,
     row.desiredRuntimeState,
     row.desiredActivationEpoch,
@@ -185483,7 +185491,7 @@ async function loadCanonicalTenantRouteFleetSnapshot(input) {
   const removalTargets = [];
   for (const appRows of grouped.values()) {
     const desired = appRows[0];
-    if (desired.desiredRuntimeState === "serving" && desired.desiredNodeId === input.nodeId) {
+    if (desired.hasBackend && desired.desiredRuntimeState === "serving" && desired.desiredNodeId === input.nodeId) {
       const joinedRows = appRows.filter((row) => row.instanceId !== null);
       try {
         bindings.push(bindingFromRows(joinedRows));
@@ -401291,7 +401299,7 @@ function requestLocalHealth(url2, init) {
       },
       (response) => {
         const status = response.statusCode ?? 0;
-        response.once("end", () => resolve115({ ok: status >= 200 && status < 300 }));
+        resolve115({ ok: status >= 200 && status < 300 });
         response.resume();
       }
     );