@astrale-domains/services 0.2.2 → 0.2.4

package/dist/schema/{service/cloudflare-worker-class.js → modules/service/classes/cloudflare-worker.js}

@@ -1,7 +1,7 @@
 import { nodeClass, property } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { deployCloudflareWorker } from './methods/index.js';
-import { Service } from './service-class.js';
+import { deployCloudflareWorker } from '../functions/index.js';
+import { Service } from './service.js';
 export const CloudflareWorker = nodeClass({
     description: 'One Service placed in a Cloudflare Workers dispatch namespace.',
     extends: [Service],

package/dist/schema/modules/service/classes/index.d.ts

@@ -0,0 +1,3 @@
+export { CloudflareWorker } from './cloudflare-worker.js';
+export { Service } from './service.js';
+export { service_owned_by } from './service-owned-by.js';

package/dist/schema/modules/service/classes/index.js

@@ -0,0 +1,3 @@
+export { CloudflareWorker } from './cloudflare-worker.js';
+export { Service } from './service.js';
+export { service_owned_by } from './service-owned-by.js';

package/dist/schema/{service/service-owned-by-edge-class.js → modules/service/classes/service-owned-by.js}

@@ -1,6 +1,6 @@
 import { K, edgeClass } from '@astrale-os/sdk/schema';
-import { TraverseOwnedService } from './policies.js';
-import { Service } from './service-class.js';
+import { TraverseOwnedService } from '../policies/index.js';
+import { Service } from './service.js';
 export const service_owned_by = edgeClass.directed({
     description: 'The Identity that owns and may manage one Service.',
     source: { as: 'owner', accepts: [K.classes.Identity], outgoing: '0..*' },

package/dist/schema/{service/service-class.d.ts → modules/service/classes/service.d.ts}

@@ -1,11 +1,3 @@
-import { z } from 'zod';
-export declare const serviceLifecycle: z.ZodEnum<{
-    deleting: "deleting";
-    deploying: "deploying";
-    failed: "failed";
-    ready: "ready";
-    reconciling: "reconciling";
-}>;
 /** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
 export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
     readonly depth: 1;
@@ -26,7 +18,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name">, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name", undefined>, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
         readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Descriptable"> & {
             readonly origin: "kernel.astrale.ai";
         };
@@ -42,7 +34,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description">, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description", undefined>, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
         readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Timestamped"> & {
             readonly origin: "kernel.astrale.ai";
         };
@@ -58,21 +50,29 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt">, never, never>];
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt", undefined> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt", undefined> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt", undefined>, never, never>];
     readonly properties: {
-        readonly providerKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self">;
-        readonly providerName: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self">;
-        readonly serviceKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self">;
-        readonly url: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">;
-        readonly state: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self">;
-        readonly digest: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self">;
-        readonly revision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self">;
-        readonly deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self">;
-        readonly operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self">;
-        readonly hostedOrigin: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self">;
-        readonly hostedRevision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self">;
-        readonly hostedPublicationEtag: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self">;
-        readonly error: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self">;
+        readonly providerKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self", undefined>;
+        readonly providerName: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self", undefined>;
+        readonly serviceKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self", undefined>;
+        readonly url: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self", never>;
+        readonly state: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self", undefined>;
+        readonly digest: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self", never>;
+        readonly revision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self", never>;
+        readonly deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self", never>;
+        readonly operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self", never>;
+        readonly hostedIssuer: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self", never>;
+        readonly hostedOrigin: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self", never>;
+        readonly hostedRevision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self", never>;
+        readonly hostedPublicationEtag: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self", never>;
+        readonly hostedFunctions: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
+            ref: string;
+            path: string;
+        }[], {
+            ref: string;
+            path: string;
+        }[], false, "hostedFunctions", "self", never>;
+        readonly error: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self", never>;
     };
     readonly methods: {
         readonly setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -139,16 +139,22 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             };
         }, "authenticated", false, "default">>;
     };
-    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false> & {
+    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
+        ref: string;
+        path: string;
+    }[], {
+        ref: string;
+        path: string;
+    }[], false, "hostedFunctions", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self", never>) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false, never> & {
         readonly name: "description";
         readonly key: "kernel.astrale.ai:class.Descriptable.property.description";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
-        readonly name: "name";
-        readonly key: "kernel.astrale.ai:class.Named.property.name";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
         readonly name: "createdAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.createdAt";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
+        readonly name: "name";
+        readonly key: "kernel.astrale.ai:class.Named.property.name";
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
         readonly name: "updatedAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.updatedAt";
     });

package/dist/schema/{service/service-class.js → modules/service/classes/service.js}

@@ -1,12 +1,16 @@
 import { K, nodeClass, property, schema as valueSchema } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { deleteService, deleteServiceSecret, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './methods/index.js';
-import { ObserveService } from './policies.js';
-export const serviceLifecycle = z.enum(['deploying', 'reconciling', 'ready', 'failed', 'deleting']);
+import { deleteService, deleteServiceSecret, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from '../functions/index.js';
+import { ObserveService } from '../policies/index.js';
+import { serviceLifecycle } from '../types/index.js';
 const digest = z
     .string()
     .length(71)
     .regex(/sha256:[0-9a-f]{64}/);
+const publishedFunction = z.strictObject({
+    ref: z.string().min(1).max(512),
+    path: z.string().min(1).max(2_048),
+});
 /** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
 export const Service = nodeClass({
     abstract: true,
@@ -22,9 +26,11 @@ export const Service = nodeClass({
         revision: property(digest, { required: false }),
         deploymentReceipt: property(z.string().min(1).max(128), { required: false }),
         operationExpiresAt: property(valueSchema.values.instant, { required: false }),
+        hostedIssuer: property(z.string().min(1).max(2_048), { required: false }),
         hostedOrigin: property(z.string().min(1).max(512), { required: false }),
         hostedRevision: property(digest, { required: false }),
         hostedPublicationEtag: property(digest, { required: false }),
+        hostedFunctions: property(z.array(publishedFunction).max(1_024), { required: false }),
         error: property(z.string().max(5_000), { required: false }),
     },
     methods: {

package/dist/schema/{service/methods/delete-secret.js → modules/service/functions/delete-service-secret.js}

@@ -1,7 +1,6 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { secretName } from './secret-name.js';
-import { secretOperationRejection } from './secret-operation-rejection.js';
+import { secretName, secretOperationRejection } from '../types/index.js';
 export const deleteServiceSecret = method({
     description: 'Delete one write-only Service secret.',
     auth: 'authenticated',

package/dist/schema/{service/methods → modules/service/functions}/delete-service.js

@@ -1,7 +1,7 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
 export const deleteService = method({
-    description: 'Convergently delete the hosted Domain, provider placement, and Service record.',
+    description: 'Convergently delete provider resources and the owned Service without uninstalling consumers.',
     auth: 'authenticated',
     input: z.strictObject({}),
     output: z.discriminatedUnion('kind', [

package/dist/schema/{service/methods → modules/service/functions}/deploy-cloudflare-worker.d.ts

@@ -63,17 +63,16 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         revision?: string | undefined;
         state: "deleting" | "deploying" | "failed" | "ready" | "reconciling";
         error?: string | null | undefined;
-        domain?: {
+        application?: {
             issuer: string;
             origin: string;
             revision: string;
             publicationEtag: string;
+            functions: {
+                path: string;
+                ref: string;
+            }[];
         } | undefined;
-        functions: {
-            id: string;
-            path: string;
-            ref: string;
-        }[];
     } | {
         kind: "rejected";
         reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";

package/dist/schema/{service/methods → modules/service/functions}/deploy-cloudflare-worker.js

@@ -1,7 +1,7 @@
 import { method } from '@astrale-os/sdk/schema';
-import { deployServiceInput, deployServiceOutput } from '../../deployment/index.js';
+import { deployServiceInput, deployServiceOutput } from '../types/index.js';
 export const deployCloudflareWorker = method({
-    description: 'Create or converge one Cloudflare Worker Service and its hosted Domain.',
+    description: 'Create or converge one Cloudflare Worker Service and admit its optional Publication.',
     auth: 'authenticated',
     static: true,
     input: deployServiceInput,

package/dist/schema/{service/methods → modules/service/functions}/index.d.ts

@@ -1,4 +1,4 @@
-export { deleteServiceSecret } from './delete-secret.js';
+export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
 export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';
 export { listServiceLogs } from './list-service-logs.js';

package/dist/schema/{service/methods → modules/service/functions}/index.js

@@ -1,4 +1,4 @@
-export { deleteServiceSecret } from './delete-secret.js';
+export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
 export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';
 export { listServiceLogs } from './list-service-logs.js';

package/dist/schema/{service/methods → modules/service/functions}/list-service-secret-names.js

@@ -1,6 +1,6 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { secretName } from './secret-name.js';
+import { secretName } from '../types/index.js';
 export const listServiceSecretNames = method({
     description: 'List write-only Service secret names without exposing values.',
     auth: 'authenticated',

package/dist/schema/{service/methods → modules/service/functions}/set-service-secret.js

@@ -1,7 +1,6 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { secretName } from './secret-name.js';
-import { secretOperationRejection } from './secret-operation-rejection.js';
+import { secretName, secretOperationRejection } from '../types/index.js';
 export const setServiceSecret = method({
     description: 'Set one write-only Service secret.',
     auth: 'authenticated',

package/dist/schema/modules/service/index.d.ts

@@ -0,0 +1,5 @@
+export { CloudflareWorker, Service, service_owned_by } from './classes/index.js';
+export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './functions/index.js';
+export { ObserveService, TraverseOwnedService } from './policies/index.js';
+export { artifact, artifactModule, assetBundle, assetFile, deployedFunction, deployServiceInput, deployServiceOutput, publishedApplication, resourceLimits, revisionedDeployment, serviceLifecycle, PORTABLE_BASE64_CHUNK_SIZE, } from './types/index.js';
+export type { ArtifactModule, AssetBundle, DeployServiceInput, DeployServiceOutput, ResourceLimits, } from './types/index.js';

package/dist/schema/modules/service/index.js

@@ -0,0 +1,4 @@
+export { CloudflareWorker, Service, service_owned_by } from './classes/index.js';
+export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './functions/index.js';
+export { ObserveService, TraverseOwnedService } from './policies/index.js';
+export { artifact, artifactModule, assetBundle, assetFile, deployedFunction, deployServiceInput, deployServiceOutput, publishedApplication, resourceLimits, revisionedDeployment, serviceLifecycle, PORTABLE_BASE64_CHUNK_SIZE, } from './types/index.js';

package/dist/schema/modules/service/policies/index.d.ts

@@ -0,0 +1,2 @@
+export { ObserveService } from './observe-service.js';
+export { TraverseOwnedService } from './traverse-owned-service.js';

package/dist/schema/modules/service/policies/index.js

@@ -0,0 +1,2 @@
+export { ObserveService } from './observe-service.js';
+export { TraverseOwnedService } from './traverse-owned-service.js';

package/dist/schema/modules/service/policies/observe-service.d.ts

@@ -0,0 +1,2 @@
+/** A Service is visible only to the Identity that owns its provider effects. */
+export declare const ObserveService: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/service/policies/observe-service.js

@@ -0,0 +1,7 @@
+import { policy } from '@astrale-os/sdk/schema';
+import { service_owned_by } from '../classes/service-owned-by.js';
+/** A Service is visible only to the Identity that owns its provider effects. */
+export const ObserveService = policy({
+    description: 'The subject owns this Service.',
+    match: ({ edge, object, subject }) => edge({ source: subject, class: () => service_owned_by, target: object }),
+});

package/dist/schema/modules/service/policies/traverse-owned-service.d.ts

@@ -0,0 +1,2 @@
+/** Ownership edges disclose only the subject's own Service relationship. */
+export declare const TraverseOwnedService: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/service/policies/traverse-owned-service.js

@@ -0,0 +1,7 @@
+import { policy } from '@astrale-os/sdk/schema';
+import { service_owned_by } from '../classes/service-owned-by.js';
+/** Ownership edges disclose only the subject's own Service relationship. */
+export const TraverseOwnedService = policy({
+    description: 'The subject owns the Service at the target of this relationship.',
+    match: ({ allOf, edge, source, subject, target }) => allOf(edge({ source: subject, class: () => service_owned_by, target }), edge({ source, class: () => service_owned_by, target })),
+});

package/dist/schema/{deployment/request.js → modules/service/types/deploy-service-input.js}

@@ -1,7 +1,7 @@
 import { z } from 'zod';
-import { assetBundle } from './asset.js';
-import { resourceLimits } from './limits.js';
-import { artifactModule } from './module.js';
+import { artifactModule } from './service-deployment-artifact-module.js';
+import { assetBundle } from './service-deployment-assets.js';
+import { resourceLimits } from './service-deployment-resource-limits.js';
 export const artifact = z.strictObject({
     entry: z.string().min(1).max(256),
     modules: z.array(artifactModule).min(1).max(40),

package/dist/schema/{deployment/result.d.ts → modules/service/types/deploy-service-output.d.ts}

@@ -1,14 +1,17 @@
 import { z } from 'zod';
 export declare const deployedFunction: z.ZodObject<{
-    id: z.ZodString;
     path: z.ZodString;
     ref: z.ZodString;
 }, z.core.$strict>;
-export declare const hostedDomain: z.ZodObject<{
+export declare const publishedApplication: z.ZodObject<{
     issuer: z.ZodString;
     origin: z.ZodString;
     revision: z.ZodString;
     publicationEtag: z.ZodString;
+    functions: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        ref: z.ZodString;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const deployedService: z.ZodObject<{
     id: z.ZodString;
@@ -24,16 +27,15 @@ export declare const deployedService: z.ZodObject<{
         reconciling: "reconciling";
     }>;
     error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    domain: z.ZodOptional<z.ZodObject<{
+    application: z.ZodOptional<z.ZodObject<{
         issuer: z.ZodString;
         origin: z.ZodString;
         revision: z.ZodString;
         publicationEtag: z.ZodString;
-    }, z.core.$strict>>;
-    functions: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        path: z.ZodString;
-        ref: z.ZodString;
+        functions: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            ref: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const deployServiceOutput: z.ZodUnion<readonly [z.ZodObject<{
@@ -50,16 +52,15 @@ export declare const deployServiceOutput: z.ZodUnion<readonly [z.ZodObject<{
         reconciling: "reconciling";
     }>;
     error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    domain: z.ZodOptional<z.ZodObject<{
+    application: z.ZodOptional<z.ZodObject<{
         issuer: z.ZodString;
         origin: z.ZodString;
         revision: z.ZodString;
         publicationEtag: z.ZodString;
-    }, z.core.$strict>>;
-    functions: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        path: z.ZodString;
-        ref: z.ZodString;
+        functions: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            ref: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"rejected">;

package/dist/schema/{deployment/result.js → modules/service/types/deploy-service-output.js}

@@ -1,15 +1,15 @@
 import { z } from 'zod';
-import { deploymentRejection } from './deployment-rejection.js';
+import { deploymentRejection } from './service-deployment-rejection.js';
 export const deployedFunction = z.strictObject({
-    id: z.string(),
     path: z.string(),
     ref: z.string(),
 });
-export const hostedDomain = z.strictObject({
+export const publishedApplication = z.strictObject({
     issuer: z.string().min(1),
     origin: z.string().min(1),
     revision: z.string().min(1),
     publicationEtag: z.string().min(1),
+    functions: z.array(deployedFunction),
 });
 export const deployedService = z.strictObject({
     id: z.string().min(1),
@@ -19,7 +19,6 @@ export const deployedService = z.strictObject({
     revision: z.string().min(1).max(80).optional(),
     state: z.enum(['deploying', 'reconciling', 'ready', 'failed', 'deleting']),
     error: z.string().nullable().optional(),
-    domain: hostedDomain.optional(),
-    functions: z.array(deployedFunction),
+    application: publishedApplication.optional(),
 });
 export const deployServiceOutput = z.union([deployedService, deploymentRejection]);

package/dist/schema/modules/service/types/index.d.ts

@@ -0,0 +1,16 @@
+export { artifactModule } from './service-deployment-artifact-module.js';
+export type { ArtifactModule } from './service-deployment-artifact-module.js';
+export { assetBundle, assetFile } from './service-deployment-assets.js';
+export type { AssetBundle } from './service-deployment-assets.js';
+export { MAX_ASSET_BASE64_SIZE, MAX_MODULE_BASE64_SIZE, PORTABLE_BASE64_CHUNK_SIZE, } from './service-deployment-content.js';
+export { deploymentRejection } from './service-deployment-rejection.js';
+export type { DeploymentRejection } from './service-deployment-rejection.js';
+export { resourceLimits } from './service-deployment-resource-limits.js';
+export type { ResourceLimits } from './service-deployment-resource-limits.js';
+export { artifact, deployServiceInput, revisionedDeployment } from './deploy-service-input.js';
+export type { DeployServiceInput } from './deploy-service-input.js';
+export { deployedFunction, deployedService, deployServiceOutput, publishedApplication, } from './deploy-service-output.js';
+export type { DeployServiceOutput } from './deploy-service-output.js';
+export { serviceLifecycle } from './service-lifecycle.js';
+export { secretName } from './service-secret-name.js';
+export { secretOperationRejection } from './service-secret-operation-rejection.js';

package/dist/schema/modules/service/types/index.js

@@ -0,0 +1,10 @@
+export { artifactModule } from './service-deployment-artifact-module.js';
+export { assetBundle, assetFile } from './service-deployment-assets.js';
+export { MAX_ASSET_BASE64_SIZE, MAX_MODULE_BASE64_SIZE, PORTABLE_BASE64_CHUNK_SIZE, } from './service-deployment-content.js';
+export { deploymentRejection } from './service-deployment-rejection.js';
+export { resourceLimits } from './service-deployment-resource-limits.js';
+export { artifact, deployServiceInput, revisionedDeployment } from './deploy-service-input.js';
+export { deployedFunction, deployedService, deployServiceOutput, publishedApplication, } from './deploy-service-output.js';
+export { serviceLifecycle } from './service-lifecycle.js';
+export { secretName } from './service-secret-name.js';
+export { secretOperationRejection } from './service-secret-operation-rejection.js';

package/dist/schema/{deployment/module.js → modules/service/types/service-deployment-artifact-module.js}

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { encodedContent, MAX_MODULE_BASE64_SIZE } from './content.js';
+import { encodedContent, MAX_MODULE_BASE64_SIZE } from './service-deployment-content.js';
 const fields = {
     name: z.string().min(1).max(256),
     kind: z.enum(['esm', 'wasm', 'text', 'data']).optional(),

package/dist/schema/{deployment/asset.js → modules/service/types/service-deployment-assets.js}

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { encodedContent, MAX_ASSET_BASE64_SIZE } from './content.js';
+import { encodedContent, MAX_ASSET_BASE64_SIZE } from './service-deployment-content.js';
 const fields = {
     path: z.string().min(1).max(2_048),
     contentType: z.string().min(1).max(256).optional(),

package/dist/schema/modules/service/types/service-lifecycle.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+export declare const serviceLifecycle: z.ZodEnum<{
+    deleting: "deleting";
+    deploying: "deploying";
+    failed: "failed";
+    ready: "ready";
+    reconciling: "reconciling";
+}>;

package/dist/schema/modules/service/types/service-lifecycle.js

@@ -0,0 +1,2 @@
+import { z } from 'zod';
+export const serviceLifecycle = z.enum(['deploying', 'reconciling', 'ready', 'failed', 'deleting']);

package/dist/schema/modules/service/types/service-secret-name.d.ts

@@ -0,0 +1,2 @@
+import { z } from 'zod';
+export declare const secretName: z.ZodString;

package/dist/schema/modules/service/types/service-secret-operation-rejection.d.ts

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+export declare const secretOperationRejection: z.ZodObject<{
+    kind: z.ZodLiteral<"rejected">;
+    reason: z.ZodEnum<{
+        "binding-unavailable": "binding-unavailable";
+        "invalid-secret-name": "invalid-secret-name";
+        "service-unavailable": "service-unavailable";
+    }>;
+}, z.core.$strict>;