@astrale-domains/services 0.2.3 → 0.2.5

package/dist/schema/{service/cloudflare-worker-class.js → modules/service/classes/cloudflare-worker.js}

@@ -1,7 +1,7 @@
 import { nodeClass, property } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { deployCloudflareWorker } from './methods/index.js';
-import { Service } from './service-class.js';
+import { deployCloudflareWorker } from '../functions/deploy-cloudflare-worker.js';
+import { Service } from './service.js';
 export const CloudflareWorker = nodeClass({
     description: 'One Service placed in a Cloudflare Workers dispatch namespace.',
     extends: [Service],

package/dist/schema/modules/service/classes/index.d.ts

@@ -0,0 +1,3 @@
+export { CloudflareWorker } from './cloudflare-worker.js';
+export { Service } from './service.js';
+export { service_owned_by } from './service-owned-by.js';

package/dist/schema/modules/service/classes/index.js

@@ -0,0 +1,3 @@
+export { CloudflareWorker } from './cloudflare-worker.js';
+export { Service } from './service.js';
+export { service_owned_by } from './service-owned-by.js';

package/dist/schema/{service/service-owned-by-edge-class.d.ts → modules/service/classes/service-owned-by.d.ts}

@@ -4,12 +4,12 @@ export declare const service_owned_by: import("@astrale-os/sdk/schema").Directed
     readonly extends: readonly [];
     readonly properties: never;
     readonly source: {
-        readonly as: "owner";
-        readonly outgoing: "0..*";
+        readonly as: "service";
+        readonly outgoing: "1";
     };
     readonly target: {
-        readonly as: "service";
-        readonly incoming: "1";
+        readonly as: "owner";
+        readonly incoming: "0..*";
     };
     readonly constraints: Record<never, never>;
     readonly effectiveProperties: never;

package/dist/schema/{service/service-owned-by-edge-class.js → modules/service/classes/service-owned-by.js}

@@ -1,9 +1,9 @@
 import { K, edgeClass } from '@astrale-os/sdk/schema';
-import { TraverseOwnedService } from './policies.js';
-import { Service } from './service-class.js';
+import { TraverseOwnedService } from '../policies/index.js';
+import { Service } from './service.js';
 export const service_owned_by = edgeClass.directed({
     description: 'The Identity that owns and may manage one Service.',
-    source: { as: 'owner', accepts: [K.classes.Identity], outgoing: '0..*' },
-    target: { as: 'service', accepts: [() => Service], incoming: '1' },
+    source: { as: 'service', accepts: [() => Service], outgoing: '1' },
+    target: { as: 'owner', accepts: [K.classes.Identity], incoming: '0..*' },
     policies: { traverse: () => TraverseOwnedService },
 });

package/dist/schema/{service/service-class.d.ts → modules/service/classes/service.d.ts}

@@ -1,11 +1,3 @@
-import { z } from 'zod';
-export declare const serviceLifecycle: z.ZodEnum<{
-    deleting: "deleting";
-    deploying: "deploying";
-    failed: "failed";
-    ready: "ready";
-    reconciling: "reconciling";
-}>;
 /** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
 export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
     readonly depth: 1;
@@ -26,7 +18,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name">, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "name", "kernel.astrale.ai:class.Named.property.name", undefined>, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
         readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Descriptable"> & {
             readonly origin: "kernel.astrale.ai";
         };
@@ -42,7 +34,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description">, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "description", "kernel.astrale.ai:class.Descriptable.property.description", undefined>, never, never>, import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
         readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Timestamped"> & {
             readonly origin: "kernel.astrale.ai";
         };
@@ -58,29 +50,36 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly abstract: true;
     }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
         readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt">, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt">, never, never>];
+    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt", undefined> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt", undefined>, never, never, import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "createdAt", "kernel.astrale.ai:class.Timestamped.property.createdAt", undefined> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "updatedAt", "kernel.astrale.ai:class.Timestamped.property.updatedAt", undefined>, never, never>];
     readonly properties: {
-        readonly providerKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self">;
-        readonly providerName: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self">;
-        readonly serviceKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self">;
-        readonly url: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">;
-        readonly state: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self">;
-        readonly digest: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self">;
-        readonly revision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self">;
-        readonly deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self">;
-        readonly operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self">;
-        readonly hostedIssuer: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self">;
-        readonly hostedOrigin: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self">;
-        readonly hostedRevision: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self">;
-        readonly hostedPublicationEtag: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self">;
-        readonly hostedFunctions: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
-            ref: string;
-            path: string;
-        }[], {
-            ref: string;
-            path: string;
-        }[], false, "hostedFunctions", "self">;
-        readonly error: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self">;
+        readonly providerName: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self", undefined>;
+        readonly serviceKey: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self", undefined>;
+        readonly url: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self", never>;
+        readonly state: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<unknown, "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self", import("@astrale-os/sdk/state").StateTopology<{
+            readonly deploying: {
+                readonly recordProviderDeployment: "reconciling";
+                readonly failDeployment: "failed";
+                readonly deleteService: "deleting";
+            };
+            readonly reconciling: {
+                readonly retryDeployment: "deploying";
+                readonly completeDeployment: "ready";
+                readonly deleteService: "deleting";
+            };
+            readonly ready: {
+                readonly redeploy: "deploying";
+                readonly deleteService: "deleting";
+            };
+            readonly failed: {
+                readonly retryDeployment: "deploying";
+                readonly deleteService: "deleting";
+            };
+            readonly deleting: {};
+        }, "deploying">>;
+        readonly digest: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self", never>;
+        readonly deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self", never>;
+        readonly operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self", never>;
+        readonly error: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self", never>;
     };
     readonly methods: {
         readonly setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -89,12 +88,12 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         }, {
             readonly mode: 'value';
             readonly value: {
+                name: string;
+            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-            } | {
-                name: string;
             };
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
         }, {
@@ -105,11 +104,11 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             } | {
                 ok: true;
             };
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             crons: string[];
         }, {
@@ -120,11 +119,11 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 kind: "rejected";
                 reason: "invalid-schedule" | "service-unavailable";
             };
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             tail?: number | undefined;
             since?: number | undefined;
@@ -136,7 +135,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 level: string;
                 line: string;
             }[];
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
         readonly delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
@@ -145,34 +144,48 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 kind: "deleting";
                 retryAfterMs: number;
             };
-        }, "authenticated", false, "default">>;
+        }, "authorized", false, "default">>;
     };
-    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<{
-        ref: string;
-        path: string;
-    }[], {
-        ref: string;
-        path: string;
-    }[], false, "hostedFunctions", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedIssuer", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedOrigin", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedPublicationEtag", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "hostedRevision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "revision", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self"> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self">) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false> & {
+    readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<unknown, "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self", import("@astrale-os/sdk/state").StateTopology<{
+        readonly deploying: {
+            readonly recordProviderDeployment: "reconciling";
+            readonly failDeployment: "failed";
+            readonly deleteService: "deleting";
+        };
+        readonly reconciling: {
+            readonly retryDeployment: "deploying";
+            readonly completeDeployment: "ready";
+            readonly deleteService: "deleting";
+        };
+        readonly ready: {
+            readonly redeploy: "deploying";
+            readonly deleteService: "deleting";
+        };
+        readonly failed: {
+            readonly retryDeployment: "deploying";
+            readonly deleteService: "deleting";
+        };
+        readonly deleting: {};
+    }, "deploying">> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "url", "self", never>) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false, never> & {
         readonly name: "description";
         readonly key: "kernel.astrale.ai:class.Descriptable.property.description";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
         readonly name: "createdAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.createdAt";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
         readonly name: "name";
         readonly key: "kernel.astrale.ai:class.Named.property.name";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
+    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true, undefined> & {
         readonly name: "updatedAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.updatedAt";
     });
     readonly effectiveInstanceMethods: import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: string[];
-    }, "authenticated", false, "default">>, "schedules", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    }, "authorized", false, "default">>, "schedules", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: string[];
-    }, "authenticated", false, "default">>, "secrets", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    }, "authorized", false, "default">>, "secrets", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: {
             kind: "deleted";
@@ -180,29 +193,18 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             kind: "deleting";
             retryAfterMs: number;
         };
-    }, "authenticated", false, "default">>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-        tail?: number | undefined;
-        since?: number | undefined;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            ts: number;
-            level: string;
-            line: string;
-        }[];
-    }, "authenticated", false, "default">>, "logs", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, "default">>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
         value: string;
     }, {
         readonly mode: 'value';
         readonly value: {
+            name: string;
+        } | {
             kind: "rejected";
             reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-        } | {
-            name: string;
         };
-    }, "authenticated", false, "default">>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, "default">>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
     }, {
         readonly mode: 'value';
@@ -212,7 +214,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         } | {
             ok: true;
         };
-    }, "authenticated", false, "default">>, "deleteSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, "default">>, "deleteSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         crons: string[];
     }, {
         readonly mode: 'value';
@@ -222,6 +224,17 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             kind: "rejected";
             reason: "invalid-schedule" | "service-unavailable";
         };
-    }, "authenticated", false, "default">>, "setSchedule", "self">;
+    }, "authorized", false, "default">>, "setSchedule", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        tail?: number | undefined;
+        since?: number | undefined;
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            id: string;
+            ts: number;
+            level: string;
+            line: string;
+        }[];
+    }, "authorized", false, "default">>, "logs", "self">;
     readonly effectiveStaticMethods: never;
-}> & import("@astrale-os/sdk/schema").StateClass<Readonly<Omit<Readonly<Record<never, never>>, never> & {}>>;
+}>;

package/dist/schema/modules/service/classes/service.js

@@ -0,0 +1,37 @@
+import { K, nodeClass, property, schema as valueSchema, stateProperty, } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { deleteServiceSecret } from '../functions/delete-service-secret.js';
+import { deleteService } from '../functions/delete-service.js';
+import { listServiceLogs } from '../functions/list-service-logs.js';
+import { listServiceSchedules } from '../functions/list-service-schedules.js';
+import { listServiceSecretNames } from '../functions/list-service-secret-names.js';
+import { replaceServiceSchedules } from '../functions/replace-service-schedules.js';
+import { setServiceSecret } from '../functions/set-service-secret.js';
+import { OwnService } from '../policies/own-service.js';
+import { serviceLifecycle } from '../states/index.js';
+/** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
+export const Service = nodeClass({
+    abstract: true,
+    description: 'One caller-owned provider-neutral deployed Service.',
+    extends: [K.classes.Named, K.classes.Descriptable, K.classes.Timestamped],
+    properties: {
+        providerName: z.string().min(1).max(120),
+        serviceKey: z.string().min(1).max(63),
+        url: property(z.string().min(1).max(2_048), { required: false }),
+        state: stateProperty(serviceLifecycle),
+        digest: property(z.string().min(1).max(256), { required: false }),
+        deploymentReceipt: property(z.string().min(1).max(128), { required: false }),
+        operationExpiresAt: property(valueSchema.values.instant, { required: false }),
+        error: property(z.string().max(5_000), { required: false }),
+    },
+    methods: {
+        setSecret: setServiceSecret,
+        deleteSecret: deleteServiceSecret,
+        secrets: listServiceSecretNames,
+        setSchedule: replaceServiceSchedules,
+        schedules: listServiceSchedules,
+        logs: listServiceLogs,
+        delete: deleteService,
+    },
+    policies: { read: () => OwnService },
+});

package/dist/schema/{service/methods/delete-secret.d.ts → modules/service/functions/delete-service-secret.d.ts}

@@ -3,9 +3,9 @@ export declare const deleteServiceSecret: import("@astrale-os/sdk/schema").Metho
 }, {
     readonly mode: 'value';
     readonly value: {
-        ok: true;
-    } | {
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+    } | {
+        ok: true;
     };
-}, "authenticated", false, "default">>;
+}, "authorized", false, "default">>;

package/dist/schema/{service/methods/delete-secret.js → modules/service/functions/delete-service-secret.js}

@@ -1,10 +1,11 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { secretName } from './secret-name.js';
-import { secretOperationRejection } from './secret-operation-rejection.js';
+import { OwnService } from '../policies/own-service.js';
+import { secretName, secretOperationRejection } from '../types/index.js';
 export const deleteServiceSecret = method({
     description: 'Delete one write-only Service secret.',
-    auth: 'authenticated',
+    auth: 'authorized',
+    policy: ({ check, self }) => check(OwnService, self),
     input: z.strictObject({ name: secretName }),
     output: z.union([z.strictObject({ ok: z.literal(true) }), secretOperationRejection]),
 });

package/dist/schema/{service/methods → modules/service/functions}/delete-service.d.ts

@@ -6,4 +6,4 @@ export declare const deleteService: import("@astrale-os/sdk/schema").Method<impo
         kind: "deleting";
         retryAfterMs: number;
     };
-}, "authenticated", false, "default">>;
+}, "authorized", false, "default">>;

package/dist/schema/{service/methods → modules/service/functions}/delete-service.js

@@ -1,8 +1,10 @@
 import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
+import { OwnService } from '../policies/own-service.js';
 export const deleteService = method({
-    description: 'Convergently delete provider resources and the Service record without uninstalling consumers.',
-    auth: 'authenticated',
+    description: 'Convergently delete provider resources and the owned Service without uninstalling consumers.',
+    auth: 'authorized',
+    policy: ({ check, self }) => check(OwnService, self),
     input: z.strictObject({}),
     output: z.discriminatedUnion('kind', [
         z.strictObject({ kind: z.literal('deleted') }),

package/dist/schema/{deployment/request.d.ts → modules/service/functions/deploy-cloudflare-worker.d.ts}

@@ -22,7 +22,6 @@ export declare const artifact: z.ZodObject<{
     }, z.core.$strict>]>>;
 }, z.core.$strict>;
 export declare const revisionedDeployment: z.ZodObject<{
-    revision: z.ZodString;
     requiredSecrets: z.ZodArray<z.ZodString>;
     release: z.ZodObject<{
         entry: z.ZodString;
@@ -70,7 +69,6 @@ export declare const deployServiceInput: z.ZodObject<{
         }>>;
     }, z.core.$strict>]>>>;
     revisioned: z.ZodOptional<z.ZodObject<{
-        revision: z.ZodString;
         requiredSecrets: z.ZodArray<z.ZodString>;
         release: z.ZodObject<{
             entry: z.ZodString;
@@ -128,3 +126,103 @@ export declare const deployServiceInput: z.ZodObject<{
     serviceKey: z.ZodString;
 }, z.core.$strict>;
 export type DeployServiceInput = z.infer<typeof deployServiceInput>;
+export declare const deployedService: z.ZodObject<{
+    id: z.ZodString;
+    serviceKey: z.ZodString;
+    url: z.ZodString;
+    digest: z.ZodString;
+    state: z.ZodLiteral<"ready">;
+}, z.core.$strict>;
+export declare const deploymentRejection: z.ZodObject<{
+    kind: z.ZodLiteral<"rejected">;
+    reason: z.ZodEnum<{
+        "artifact-mode-conflict": "artifact-mode-conflict";
+        "invalid-deployment": "invalid-deployment";
+        "service-unavailable": "service-unavailable";
+    }>;
+    message: z.ZodString;
+}, z.core.$strict>;
+export declare const deployServiceOutput: z.ZodUnion<readonly [z.ZodObject<{
+    id: z.ZodString;
+    serviceKey: z.ZodString;
+    url: z.ZodString;
+    digest: z.ZodString;
+    state: z.ZodLiteral<"ready">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"rejected">;
+    reason: z.ZodEnum<{
+        "artifact-mode-conflict": "artifact-mode-conflict";
+        "invalid-deployment": "invalid-deployment";
+        "service-unavailable": "service-unavailable";
+    }>;
+    message: z.ZodString;
+}, z.core.$strict>]>;
+export type DeployServiceOutput = z.infer<typeof deployServiceOutput>;
+export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    name?: string | undefined;
+    entry?: string | undefined;
+    modules?: ({
+        contentBase64: string;
+        name: string;
+        kind?: "data" | "esm" | "text" | "wasm" | undefined;
+    } | {
+        contentBase64Chunks: string[];
+        name: string;
+        kind?: "data" | "esm" | "text" | "wasm" | undefined;
+    })[] | undefined;
+    revisioned?: {
+        requiredSecrets: string[];
+        release: {
+            entry: string;
+            modules: ({
+                contentBase64: string;
+                name: string;
+                kind?: "data" | "esm" | "text" | "wasm" | undefined;
+            } | {
+                contentBase64Chunks: string[];
+                name: string;
+                kind?: "data" | "esm" | "text" | "wasm" | undefined;
+            })[];
+        };
+    } | undefined;
+    compatibilityDate?: string | undefined;
+    compatibilityFlags?: string[] | undefined;
+    serviceBindings?: {
+        name: string;
+        service: string;
+    }[] | undefined;
+    vars?: Record<string, string> | undefined;
+    secrets?: Record<string, string> | undefined;
+    assets?: {
+        files: ({
+            contentBase64: string;
+            path: string;
+            contentType?: string | undefined;
+        } | {
+            contentBase64Chunks: string[];
+            path: string;
+            contentType?: string | undefined;
+        })[];
+        notFound?: "404-page" | "none" | "single-page-application" | undefined;
+        runWorkerFirst?: boolean | undefined;
+        htmlHandling?: "none" | undefined;
+    } | undefined;
+    limits?: {
+        cpuMs?: number | undefined;
+        subrequests?: number | undefined;
+    } | undefined;
+    serviceKey: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        id: string;
+        serviceKey: string;
+        url: string;
+        digest: string;
+        state: "ready";
+    } | {
+        kind: "rejected";
+        reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";
+        message: string;
+    };
+}, "authenticated", true, "default">>;

package/dist/schema/{deployment/request.js → modules/service/functions/deploy-cloudflare-worker.js}

@@ -1,21 +1,15 @@
+import { method } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { assetBundle } from './asset.js';
-import { resourceLimits } from './limits.js';
-import { artifactModule } from './module.js';
+import { artifactModule, assetBundle, resourceLimits } from '../types/index.js';
 export const artifact = z.strictObject({
     entry: z.string().min(1).max(256),
     modules: z.array(artifactModule).min(1).max(40),
 });
-const digest = z
-    .string()
-    .length(71)
-    .regex(/sha256:[0-9a-f]{64}/);
 export const revisionedDeployment = z.strictObject({
-    revision: digest,
     requiredSecrets: z.array(z.string().min(1).max(128)).max(64),
     release: artifact,
 });
-const deploymentFields = {
+const deployServiceFields = {
     name: z.string().min(1).max(256).optional(),
     entry: z.string().min(1).max(256).optional(),
     modules: z.array(artifactModule).min(1).max(40).optional(),
@@ -36,5 +30,25 @@ const deploymentFields = {
 };
 export const deployServiceInput = z.strictObject({
     serviceKey: z.string().min(1).max(63),
-    ...deploymentFields,
+    ...deployServiceFields,
+});
+export const deployedService = z.strictObject({
+    id: z.string().min(1),
+    serviceKey: z.string().min(1),
+    url: z.string(),
+    digest: z.string(),
+    state: z.literal('ready'),
+});
+export const deploymentRejection = z.strictObject({
+    kind: z.literal('rejected'),
+    reason: z.enum(['invalid-deployment', 'service-unavailable', 'artifact-mode-conflict']),
+    message: z.string().min(1).max(500),
+});
+export const deployServiceOutput = z.union([deployedService, deploymentRejection]);
+export const deployCloudflareWorker = method({
+    description: 'Create or converge one Cloudflare Worker Service.',
+    auth: 'authenticated',
+    static: true,
+    input: deployServiceInput,
+    output: deployServiceOutput,
 });

package/dist/schema/{service/methods → modules/service/functions}/index.d.ts

@@ -1,6 +1,7 @@
-export { deleteServiceSecret } from './delete-secret.js';
+export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
-export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';
+export { artifact, deployedService, deploymentRejection, deployCloudflareWorker, deployServiceInput, deployServiceOutput, revisionedDeployment, } from './deploy-cloudflare-worker.js';
+export type { DeployServiceInput, DeployServiceOutput } from './deploy-cloudflare-worker.js';
 export { listServiceLogs } from './list-service-logs.js';
 export { listServiceSchedules } from './list-service-schedules.js';
 export { listServiceSecretNames } from './list-service-secret-names.js';

package/dist/schema/{service/methods → modules/service/functions}/index.js

@@ -1,6 +1,6 @@
-export { deleteServiceSecret } from './delete-secret.js';
+export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
-export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';
+export { artifact, deployedService, deploymentRejection, deployCloudflareWorker, deployServiceInput, deployServiceOutput, revisionedDeployment, } from './deploy-cloudflare-worker.js';
 export { listServiceLogs } from './list-service-logs.js';
 export { listServiceSchedules } from './list-service-schedules.js';
 export { listServiceSecretNames } from './list-service-secret-names.js';