@astrale-domains/services 0.3.2 → 0.3.4

package/dist/schema/modules/service/classes/cloudflare-worker.js

@@ -2,6 +2,7 @@ import { classIcon, nodeClass, property } from '@astrale-os/sdk/schema';
 import { CloudCog } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
 import { deployCloudflareWorker } from '../functions/deploy-cloudflare-worker.js';
+import { OwnService } from '../policies/own-service.js';
 import { Service } from './service.js';
 export const CloudflareWorker = nodeClass({
     description: 'One Service placed in a Cloudflare Workers dispatch namespace.',
@@ -17,4 +18,5 @@ export const CloudflareWorker = nodeClass({
         tenantZoneId: property(z.string().min(1).max(128), { required: false }),
     },
     methods: { deploy: deployCloudflareWorker },
+    policies: { read: OwnService },
 });

package/dist/schema/modules/service/classes/service-owned-by.js

@@ -1,10 +1,9 @@
-import { edgeClass } from '@astrale-os/sdk/schema';
-import { ServicesShell } from '../dependencies/index.js';
+import { edgeClass, K } from '@astrale-os/sdk/schema';
 import { TraverseOwnedService } from '../policies/index.js';
 import { Service } from './service.js';
 export const service_owned_by = edgeClass.directed({
-    description: 'The Shell user that owns and may manage one Service.',
+    description: 'The authenticated Identity that owns and may manage one Service.',
     source: { as: 'service', accepts: [() => Service], outgoing: '1' },
-    target: { as: 'owner', accepts: [ServicesShell.classes.User], incoming: '0..*' },
+    target: { as: 'owner', accepts: [K.classes.Identity], incoming: '0..*' },
     policies: { traverse: () => TraverseOwnedService },
 });

package/dist/schema/modules/service/classes/service.d.ts

@@ -88,10 +88,10 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         }, {
             readonly mode: 'value';
             readonly value: {
+                name: string;
+            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-            } | {
-                name: string;
             };
         }, "authorized", false, "default">>;
         readonly deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -199,10 +199,10 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
     }, {
         readonly mode: 'value';
         readonly value: {
+            name: string;
+        } | {
             kind: "rejected";
             reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-        } | {
-            name: string;
         };
     }, "authorized", false, "default">>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;

package/dist/schema/modules/service/classes/service.js

@@ -8,7 +8,6 @@ import { listServiceSchedules } from '../functions/list-service-schedules.js';
 import { listServiceSecretNames } from '../functions/list-service-secret-names.js';
 import { replaceServiceSchedules } from '../functions/replace-service-schedules.js';
 import { setServiceSecret } from '../functions/set-service-secret.js';
-import { OwnService } from '../policies/own-service.js';
 import { serviceLifecycle } from '../states/index.js';
 /** Provider-neutral deployed resource. Provider implementation versions are deliberately external. */
 export const Service = nodeClass({
@@ -35,5 +34,4 @@ export const Service = nodeClass({
         logs: listServiceLogs,
         delete: deleteService,
     },
-    policies: { read: () => OwnService },
 });

package/dist/schema/modules/service/functions/delete-service-secret.d.ts

@@ -3,9 +3,9 @@ export declare const deleteServiceSecret: import("@astrale-os/sdk/schema").Metho
 }, {
     readonly mode: 'value';
     readonly value: {
+        ok: true;
+    } | {
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-    } | {
-        ok: true;
     };
 }, "authorized", false, "default">>;

package/dist/schema/modules/service/functions/deploy-cloudflare-worker.d.ts

@@ -24,6 +24,10 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
                 kind?: "data" | "esm" | "text" | "wasm" | undefined;
             })[];
         };
+        readiness?: {
+            paths: string[];
+            required?: boolean | undefined;
+        } | undefined;
     } | undefined;
     compatibilityDate?: string | undefined;
     compatibilityFlags?: string[] | undefined;
@@ -60,6 +64,7 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         url: string;
         digest: string;
         state: "ready";
+        candidateReadiness?: "passed" | "unavailable-retained-secrets" | undefined;
     } | {
         kind: "rejected";
         reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";

package/dist/schema/modules/service/functions/set-service-secret.d.ts

@@ -4,9 +4,9 @@ export declare const setServiceSecret: import("@astrale-os/sdk/schema").Method<i
 }, {
     readonly mode: 'value';
     readonly value: {
+        name: string;
+    } | {
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-    } | {
-        name: string;
     };
 }, "authorized", false, "default">>;

package/dist/schema/modules/service/index.d.ts

@@ -1,5 +1,4 @@
 export { CloudflareWorker, Service, service_owned_by } from './classes/index.js';
-export { ServicesShell } from './dependencies/index.js';
 export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './functions/index.js';
 export { OwnService, TraverseOwnedService } from './policies/index.js';
 export { serviceLifecycle } from './states/index.js';

package/dist/schema/modules/service/index.js

@@ -1,5 +1,4 @@
 export { CloudflareWorker, Service, service_owned_by } from './classes/index.js';
-export { ServicesShell } from './dependencies/index.js';
 export { deleteService, deleteServiceSecret, deployCloudflareWorker, listServiceLogs, listServiceSchedules, listServiceSecretNames, replaceServiceSchedules, setServiceSecret, } from './functions/index.js';
 export { OwnService, TraverseOwnedService } from './policies/index.js';
 export { serviceLifecycle } from './states/index.js';

package/dist/schema/modules/service/types/deploy-cloudflare-worker.d.ts

@@ -45,6 +45,10 @@ export declare const revisionedDeployment: z.ZodObject<{
             }>>;
         }, z.core.$strict>]>>;
     }, z.core.$strict>;
+    readiness: z.ZodOptional<z.ZodObject<{
+        paths: z.ZodArray<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const deployServiceInput: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
@@ -92,6 +96,10 @@ export declare const deployServiceInput: z.ZodObject<{
                 }>>;
             }, z.core.$strict>]>>;
         }, z.core.$strict>;
+        readiness: z.ZodOptional<z.ZodObject<{
+            paths: z.ZodArray<z.ZodString>;
+            required: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     compatibilityDate: z.ZodOptional<z.ZodString>;
     compatibilityFlags: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -132,6 +140,10 @@ export declare const deployedService: z.ZodObject<{
     url: z.ZodString;
     digest: z.ZodString;
     state: z.ZodLiteral<"ready">;
+    candidateReadiness: z.ZodOptional<z.ZodEnum<{
+        passed: "passed";
+        "unavailable-retained-secrets": "unavailable-retained-secrets";
+    }>>;
 }, z.core.$strict>;
 export declare const deploymentRejection: z.ZodObject<{
     kind: z.ZodLiteral<"rejected">;
@@ -148,6 +160,10 @@ export declare const deployServiceOutput: z.ZodUnion<readonly [z.ZodObject<{
     url: z.ZodString;
     digest: z.ZodString;
     state: z.ZodLiteral<"ready">;
+    candidateReadiness: z.ZodOptional<z.ZodEnum<{
+        passed: "passed";
+        "unavailable-retained-secrets": "unavailable-retained-secrets";
+    }>>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"rejected">;
     reason: z.ZodEnum<{

package/dist/schema/modules/service/types/deploy-cloudflare-worker.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { artifactModule, assetBundle, resourceLimits } from '../types/index.js';
+import { serviceReadiness } from './service-readiness.js';
 export const artifact = z.strictObject({
     entry: z.string().min(1).max(256),
     modules: z.array(artifactModule).min(1).max(40),
@@ -7,6 +8,7 @@ export const artifact = z.strictObject({
 export const revisionedDeployment = z.strictObject({
     requiredSecrets: z.array(z.string().min(1).max(128)).max(64),
     release: artifact,
+    readiness: serviceReadiness.optional(),
 });
 const deployServiceFields = {
     name: z.string().min(1).max(256).optional(),
@@ -37,6 +39,7 @@ export const deployedService = z.strictObject({
     url: z.string(),
     digest: z.string(),
     state: z.literal('ready'),
+    candidateReadiness: z.enum(['passed', 'unavailable-retained-secrets']).optional(),
 });
 export const deploymentRejection = z.strictObject({
     kind: z.literal('rejected'),

package/dist/schema/modules/service/types/index.d.ts

@@ -9,3 +9,4 @@ export { resourceLimits } from './service-deployment-resource-limits.js';
 export type { ResourceLimits } from './service-deployment-resource-limits.js';
 export { secretName } from './service-secret-name.js';
 export { secretOperationRejection } from './service-secret-operation-rejection.js';
+export { serviceReadiness } from './service-readiness.js';

package/dist/schema/modules/service/types/index.js

@@ -5,3 +5,4 @@ export { MAX_ASSET_BASE64_SIZE, MAX_MODULE_BASE64_SIZE, PORTABLE_BASE64_CHUNK_SI
 export { resourceLimits } from './service-deployment-resource-limits.js';
 export { secretName } from './service-secret-name.js';
 export { secretOperationRejection } from './service-secret-operation-rejection.js';
+export { serviceReadiness } from './service-readiness.js';

package/dist/schema/modules/service/types/service-readiness.d.ts

@@ -0,0 +1,6 @@
+import { z } from 'zod';
+/** Opaque HTTP checks; Services does not interpret the application's response bodies. */
+export declare const serviceReadiness: z.ZodObject<{
+    paths: z.ZodArray<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;

package/dist/schema/modules/service/types/service-readiness.js

@@ -0,0 +1,6 @@
+import { z } from 'zod';
+/** Opaque HTTP checks; Services does not interpret the application's response bodies. */
+export const serviceReadiness = z.strictObject({
+    paths: z.array(z.string().min(1).max(1024)).min(1).max(8),
+    required: z.boolean().optional(),
+});