@astrale-domains/services 0.2.2 → 0.2.3

package/dist/schema/service/index.d.ts

@@ -1,7 +1,5 @@
 export { CloudflareWorker } from './cloudflare-worker-class.js';
-export { hosted_by_service } from './hosted-by-service-edge-class.js';
 export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './methods/index.js';
-export { ObserveService, TraverseHostedDomain, TraverseHostedFunction, TraverseOwnedService, } from './policies.js';
+export { ObserveService, TraverseOwnedService } from './policies.js';
 export { Service, serviceLifecycle } from './service-class.js';
-export { service_hosts_domain } from './service-hosts-domain-edge-class.js';
 export { service_owned_by } from './service-owned-by-edge-class.js';

package/dist/schema/service/index.js

@@ -1,7 +1,5 @@
 export { CloudflareWorker } from './cloudflare-worker-class.js';
-export { hosted_by_service } from './hosted-by-service-edge-class.js';
 export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './methods/index.js';
-export { ObserveService, TraverseHostedDomain, TraverseHostedFunction, TraverseOwnedService, } from './policies.js';
+export { ObserveService, TraverseOwnedService } from './policies.js';
 export { Service, serviceLifecycle } from './service-class.js';
-export { service_hosts_domain } from './service-hosts-domain-edge-class.js';
 export { service_owned_by } from './service-owned-by-edge-class.js';

package/dist/schema/service/methods/delete-service.js

@@ -1,7 +1,7 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
 export const deleteService = method({
-    description: 'Convergently delete the hosted Domain, provider placement, and Service record.',
+    description: 'Convergently delete provider resources and the Service record without uninstalling consumers.',
     auth: 'authenticated',
     input: z.strictObject({}),
     output: z.discriminatedUnion('kind', [

package/dist/schema/service/methods/deploy-cloudflare-worker.d.ts

@@ -63,17 +63,16 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         revision?: string | undefined;
         state: "deleting" | "deploying" | "failed" | "ready" | "reconciling";
         error?: string | null | undefined;
-        domain?: {
+        application?: {
             issuer: string;
             origin: string;
             revision: string;
             publicationEtag: string;
+            functions: {
+                path: string;
+                ref: string;
+            }[];
         } | undefined;
-        functions: {
-            id: string;
-            path: string;
-            ref: string;
-        }[];
     } | {
         kind: "rejected";
         reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";

package/dist/schema/service/methods/deploy-cloudflare-worker.js

@@ -1,7 +1,7 @@
 import { method } from '@astrale-os/sdk/schema';
 import { deployServiceInput, deployServiceOutput } from '../../deployment/index.js';
 export const deployCloudflareWorker = method({
-    description: 'Create or converge one Cloudflare Worker Service and its hosted Domain.',
+    description: 'Create or converge one Cloudflare Worker Service and admit its optional Publication.',
     auth: 'authenticated',
     static: true,
     input: deployServiceInput,

package/dist/schema/service/policies.d.ts

@@ -2,6 +2,3 @@
 export declare const ObserveService: import("@astrale-os/sdk/schema").Policy;
 /** Ownership edges disclose only the subject's own Service relationship. */
 export declare const TraverseOwnedService: import("@astrale-os/sdk/schema").Policy;
-/** Hosted relationships disclose only resources attached to a caller-owned Service endpoint. */
-export declare const TraverseHostedDomain: import("@astrale-os/sdk/schema").Policy;
-export declare const TraverseHostedFunction: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/service/policies.js

@@ -1,6 +1,4 @@
 import { policy } from '@astrale-os/sdk/schema';
-import { hosted_by_service } from './hosted-by-service-edge-class.js';
-import { service_hosts_domain } from './service-hosts-domain-edge-class.js';
 import { service_owned_by } from './service-owned-by-edge-class.js';
 /** A Service is visible only to the Identity that owns its provider effects. */
 export const ObserveService = policy({
@@ -12,12 +10,3 @@ export const TraverseOwnedService = policy({
     description: 'The subject owns the Service at the target of this relationship.',
     match: ({ allOf, edge, source, subject, target }) => allOf(edge({ source: subject, class: () => service_owned_by, target }), edge({ source, class: () => service_owned_by, target })),
 });
-/** Hosted relationships disclose only resources attached to a caller-owned Service endpoint. */
-export const TraverseHostedDomain = policy({
-    description: 'The subject owns the Service that hosts this Domain.',
-    match: ({ allOf, edge, source, subject, target }) => allOf(edge({ source, class: () => service_hosts_domain, target }), edge({ source: subject, class: () => service_owned_by, target: source })),
-});
-export const TraverseHostedFunction = policy({
-    description: 'The subject owns the Service that hosts this Function.',
-    match: ({ allOf, edge, source, subject, target }) => allOf(edge({ source, class: () => hosted_by_service, target }), edge({ source: subject, class: () => service_owned_by, target })),
-});

package/dist/schema/service/service-class.d.ts

@@ -69,9 +69,17 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly revision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self">;
         readonly deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self">;
         readonly operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self">;
+        readonly hostedIssuer: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self">;
         readonly hostedOrigin: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self">;
         readonly hostedRevision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self">;
         readonly hostedPublicationEtag: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self">;
+        readonly hostedFunctions: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
+            ref: string;
+            path: string;
+        }[], {
+            ref: string;
+            path: string;
+        }[], false, "hostedFunctions", "self">;
         readonly error: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self">;
     };
     readonly methods: {
@@ -81,10 +89,10 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         }, {
             readonly mode: 'value';
             readonly value: {
-                name: string;
-            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+            } | {
+                name: string;
             };
         }, "authenticated", false, "default">>;
         readonly deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -139,15 +147,21 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             };
         }, "authenticated", false, "default">>;
     };
-    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false> & {
+    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
+        ref: string;
+        path: string;
+    }[], {
+        ref: string;
+        path: string;
+    }[], false, "hostedFunctions", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false> & {
         readonly name: "description";
         readonly key: "kernel.astrale.ai:class.Descriptable.property.description";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
-        readonly name: "name";
-        readonly key: "kernel.astrale.ai:class.Named.property.name";
     }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
         readonly name: "createdAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.createdAt";
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+        readonly name: "name";
+        readonly key: "kernel.astrale.ai:class.Named.property.name";
     }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
         readonly name: "updatedAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.updatedAt";
@@ -167,15 +181,26 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             retryAfterMs: number;
         };
     }, "authenticated", false, "default">>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        tail?: number | undefined;
+        since?: number | undefined;
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            id: string;
+            ts: number;
+            level: string;
+            line: string;
+        }[];
+    }, "authenticated", false, "default">>, "logs", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
         value: string;
     }, {
         readonly mode: 'value';
         readonly value: {
-            name: string;
-        } | {
             kind: "rejected";
             reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+        } | {
+            name: string;
         };
     }, "authenticated", false, "default">>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
@@ -197,17 +222,6 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             kind: "rejected";
             reason: "invalid-schedule" | "service-unavailable";
         };
-    }, "authenticated", false, "default">>, "setSchedule", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-        tail?: number | undefined;
-        since?: number | undefined;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            ts: number;
-            level: string;
-            line: string;
-        }[];
-    }, "authenticated", false, "default">>, "logs", "self">;
+    }, "authenticated", false, "default">>, "setSchedule", "self">;
     readonly effectiveStaticMethods: never;
-}>;
+}> & import("@astrale-os/sdk/schema").StateClass<Readonly<Omit<Readonly<Record<never, never>>, never> & {}>>;

package/dist/schema/service/service-class.js

@@ -7,6 +7,10 @@ const digest = z
     .string()
     .length(71)
     .regex(/sha256:[0-9a-f]{64}/);
+const publishedFunction = z.strictObject({
+    ref: z.string().min(1).max(512),
+    path: z.string().min(1).max(2_048),
+});
 /** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
 export const Service = nodeClass({
     abstract: true,
@@ -22,9 +26,11 @@ export const Service = nodeClass({
         revision: property(digest, { required: false }),
         deploymentReceipt: property(z.string().min(1).max(128), { required: false }),
         operationExpiresAt: property(valueSchema.values.instant, { required: false }),
+        hostedIssuer: property(z.string().min(1).max(2_048), { required: false }),
         hostedOrigin: property(z.string().min(1).max(512), { required: false }),
         hostedRevision: property(digest, { required: false }),
         hostedPublicationEtag: property(digest, { required: false }),
+        hostedFunctions: property(z.array(publishedFunction).max(1_024), { required: false }),
         error: property(z.string().max(5_000), { required: false }),
     },
     methods: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/services",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/astrale-os/domains.git",
@@ -28,34 +28,34 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@astrale-os/sdk": "0.5.0-beta.65",
+    "@astrale-os/sdk": "0.5.0-beta.75",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@astrale-os/adapter-cloudflare": "0.5.0-beta.68",
-    "@astrale-os/ox": ">=0.1.3 <1.0.0",
-    "@astrale-os/shell": "0.4.2-beta.7",
+    "@astrale-os/adapter-cloudflare": "0.5.0-beta.78",
+    "@astrale-os/ox": ">=0.1.4 <1.0.0",
+    "@astrale-os/shell": "0.4.2-beta.8",
     "@astrale-os/shell-react": "0.3.2-beta.5",
-    "@astrale-os/ui": "0.3.0-beta.9",
-    "@cloudflare/workers-types": "5.20260819.1",
-    "@tailwindcss/vite": "^4.0.6",
-    "@tanstack/react-router": "1.170.17",
-    "@tanstack/router-plugin": "1.168.19",
+    "@astrale-os/ui": "0.3.0-beta.13",
+    "@cloudflare/workers-types": "5.20260821.1",
+    "@tailwindcss/vite": "^4.3.3",
+    "@tanstack/react-router": "1.170.18",
+    "@tanstack/router-plugin": "1.168.23",
     "@testing-library/jest-dom": "7.0.1",
     "@testing-library/react": "16.3.2",
-    "@testing-library/user-event": "14.6.1",
-    "@types/node": "^22.0.0",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^6.0.5",
+    "@testing-library/user-event": "14.6.5",
+    "@types/node": "^26.2.0",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^6.1.0",
     "jsdom": "30.0.1",
-    "oxlint": ">=1.78.0 <2.0.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "tailwindcss": "^4.0.6",
+    "oxlint": ">=1.79.0 <2.0.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "tailwindcss": "^4.3.3",
     "typescript": "7.0.2",
-    "vite": "^8.2.1",
-    "vitest": "^4.1.10"
+    "vite": "^8.2.2",
+    "vitest": "^4.1.11"
   },
   "engines": {
     "node": ">=22.13"
@@ -78,7 +78,8 @@
     "provider:route-wildcard": "bun providers/cloudflare/operator/routing/wildcard.ts",
     "provider:route-tenant": "bun providers/cloudflare/operator/routing/tenant.ts",
     "typecheck": "tsc --noEmit && tsc --project providers/cloudflare/operator/dispatch/tsconfig.json",
-    "test": "vitest run --config vitest.config.ts",
+    "test": "vitest run --config vitest.config.ts && pnpm run accessibility:check",
+    "accessibility:check": "oxlint ui views frontend/src --jsx-a11y-plugin --react-plugin --deny-warnings",
     "frontend:dev": "vite",
     "frontend:build": "vite build"
   }

package/dist/schema/service/hosted-by-service-edge-class.d.ts

@@ -1,19 +0,0 @@
-export declare const hosted_by_service: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-    readonly depth: 0;
-    readonly abstract: false;
-    readonly extends: readonly [];
-    readonly properties: {
-        readonly callableRef: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "callableRef", "self">;
-        readonly callablePath: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "callablePath", "self">;
-    };
-    readonly source: {
-        readonly as: "function";
-        readonly outgoing: "0..1";
-    };
-    readonly target: {
-        readonly as: "service";
-        readonly incoming: "0..*";
-    };
-    readonly constraints: Record<never, never>;
-    readonly effectiveProperties: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "callablePath", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "callableRef", "self">;
-}>;

package/dist/schema/service/hosted-by-service-edge-class.js

@@ -1,14 +0,0 @@
-import { K, edgeClass } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { TraverseHostedFunction } from './policies.js';
-import { Service } from './service-class.js';
-export const hosted_by_service = edgeClass.directed({
-    description: 'One installed Function declaration delivered by one Service.',
-    source: { as: 'function', accepts: [K.classes.Function], outgoing: '0..1' },
-    target: { as: 'service', accepts: [() => Service], incoming: '0..*' },
-    properties: {
-        callableRef: z.string().min(1).max(512),
-        callablePath: z.string().min(1).max(2_048),
-    },
-    policies: { traverse: () => TraverseHostedFunction },
-});

package/dist/schema/service/service-hosts-domain-edge-class.d.ts

@@ -1,16 +0,0 @@
-export declare const service_hosts_domain: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-    readonly depth: 0;
-    readonly abstract: false;
-    readonly extends: readonly [];
-    readonly properties: never;
-    readonly source: {
-        readonly as: "service";
-        readonly outgoing: "0..1";
-    };
-    readonly target: {
-        readonly as: "domain";
-        readonly incoming: "0..1";
-    };
-    readonly constraints: Record<never, never>;
-    readonly effectiveProperties: never;
-}>;

package/dist/schema/service/service-hosts-domain-edge-class.js

@@ -1,9 +0,0 @@
-import { K, edgeClass } from '@astrale-os/sdk/schema';
-import { TraverseHostedDomain } from './policies.js';
-import { Service } from './service-class.js';
-export const service_hosts_domain = edgeClass.directed({
-    description: 'The installed Astrale Domain currently hosted by one Service.',
-    source: { as: 'service', accepts: [() => Service], outgoing: '0..1' },
-    target: { as: 'domain', accepts: [K.classes.Domain], incoming: '0..1' },
-    policies: { traverse: () => TraverseHostedDomain },
-});