@astrale-domains/services 0.3.3 → 0.4.0

package/dist/schema/modules/service/classes/cloudflare-worker.js

@@ -1,7 +1,14 @@
 import { classIcon, nodeClass, property } from '@astrale-os/sdk/schema';
 import { CloudCog } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
+import { deleteWorkerSecret } from '../functions/delete-worker-secret.js';
+import { deleteWorker } from '../functions/delete-worker.js';
 import { deployCloudflareWorker } from '../functions/deploy-cloudflare-worker.js';
+import { listWorkerLogs } from '../functions/list-worker-logs.js';
+import { listWorkerSchedules } from '../functions/list-worker-schedules.js';
+import { listWorkerSecretNames } from '../functions/list-worker-secret-names.js';
+import { replaceWorkerSchedules } from '../functions/replace-worker-schedules.js';
+import { setWorkerSecret } from '../functions/set-worker-secret.js';
 import { OwnService } from '../policies/own-service.js';
 import { Service } from './service.js';
 export const CloudflareWorker = nodeClass({
@@ -17,6 +24,15 @@ export const CloudflareWorker = nodeClass({
         tenantCertificatePackId: property(z.string().min(1).max(128), { required: false }),
         tenantZoneId: property(z.string().min(1).max(128), { required: false }),
     },
-    methods: { deploy: deployCloudflareWorker },
+    methods: {
+        deploy: deployCloudflareWorker,
+        setSecret: setWorkerSecret,
+        deleteSecret: deleteWorkerSecret,
+        secrets: listWorkerSecretNames,
+        setSchedule: replaceWorkerSchedules,
+        schedules: listWorkerSchedules,
+        logs: listWorkerLogs,
+        delete: deleteWorker,
+    },
     policies: { read: OwnService },
 });

package/dist/schema/modules/service/classes/service.d.ts

@@ -88,12 +88,12 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         }, {
             readonly mode: 'value';
             readonly value: {
-                name: string;
-            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+            } | {
+                name: string;
             };
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
         }, {
@@ -104,11 +104,11 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             } | {
                 ok: true;
             };
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             crons: string[];
         }, {
@@ -119,11 +119,11 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 kind: "rejected";
                 reason: "invalid-schedule" | "service-unavailable";
             };
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             tail?: number | undefined;
             since?: number | undefined;
@@ -135,7 +135,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 level: string;
                 line: string;
             }[];
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
         readonly delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
@@ -144,7 +144,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
                 kind: "deleting";
                 retryAfterMs: number;
             };
-        }, "authorized", false, "default">>;
+        }, "authorized", false, true>>;
     };
     readonly effectiveProperties: (import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "deploymentReceipt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "digest", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "error", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<import("@astrale-os/sdk/schema").Value, import("@astrale-os/sdk/schema").Value, false, "operationExpiresAt", "self", never> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "providerName", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, true, "serviceKey", "self", undefined> | import("@astrale-os/sdk/schema").AuthoredPropertyProjection<"deleting" | "deploying" | "failed" | "ready" | "reconciling", "deleting" | "deploying" | "failed" | "ready" | "reconciling", true, "state", "self", import("@astrale-os/sdk/state").StateTopology<{
         readonly deploying: {
@@ -179,13 +179,13 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         readonly name: "updatedAt";
         readonly key: "kernel.astrale.ai:class.Timestamped.property.updatedAt";
     });
-    readonly effectiveInstanceMethods: import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly abstractInstanceMethods: import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: string[];
-    }, "authorized", false, "default">>, "schedules", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    }, "authorized", false, true>>, "schedules", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: string[];
-    }, "authorized", false, "default">>, "secrets", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    }, "authorized", false, true>>, "secrets", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
         readonly mode: 'value';
         readonly value: {
             kind: "deleted";
@@ -193,18 +193,29 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             kind: "deleting";
             retryAfterMs: number;
         };
-    }, "authorized", false, "default">>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, true>>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        tail?: number | undefined;
+        since?: number | undefined;
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            id: string;
+            ts: number;
+            level: string;
+            line: string;
+        }[];
+    }, "authorized", false, true>>, "logs", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
         value: string;
     }, {
         readonly mode: 'value';
         readonly value: {
-            name: string;
-        } | {
             kind: "rejected";
             reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+        } | {
+            name: string;
         };
-    }, "authorized", false, "default">>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, true>>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         name: string;
     }, {
         readonly mode: 'value';
@@ -214,7 +225,7 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
         } | {
             ok: true;
         };
-    }, "authorized", false, "default">>, "deleteSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, true>>, "deleteSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         crons: string[];
     }, {
         readonly mode: 'value';
@@ -224,7 +235,23 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             kind: "rejected";
             reason: "invalid-schedule" | "service-unavailable";
         };
-    }, "authorized", false, "default">>, "setSchedule", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    }, "authorized", false, true>>, "setSchedule", "self">;
+    readonly abstractStaticMethods: never;
+    readonly effectiveInstanceMethods: import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+        readonly mode: 'value';
+        readonly value: string[];
+    }, "authorized", false, true>>, "schedules", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+        readonly mode: 'value';
+        readonly value: string[];
+    }, "authorized", false, true>>, "secrets", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+        readonly mode: 'value';
+        readonly value: {
+            kind: "deleted";
+        } | {
+            kind: "deleting";
+            retryAfterMs: number;
+        };
+    }, "authorized", false, true>>, "delete", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
         tail?: number | undefined;
         since?: number | undefined;
     }, {
@@ -235,6 +262,37 @@ export declare const Service: import("@astrale-os/sdk/schema").NodeClass<{
             level: string;
             line: string;
         }[];
-    }, "authorized", false, "default">>, "logs", "self">;
+    }, "authorized", false, true>>, "logs", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        name: string;
+        value: string;
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            kind: "rejected";
+            reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+        } | {
+            name: string;
+        };
+    }, "authorized", false, true>>, "setSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        name: string;
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            kind: "rejected";
+            reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+        } | {
+            ok: true;
+        };
+    }, "authorized", false, true>>, "deleteSecret", "self"> | import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+        crons: string[];
+    }, {
+        readonly mode: 'value';
+        readonly value: {
+            crons: string[];
+        } | {
+            kind: "rejected";
+            reason: "invalid-schedule" | "service-unavailable";
+        };
+    }, "authorized", false, true>>, "setSchedule", "self">;
     readonly effectiveStaticMethods: never;
 }>;

package/dist/schema/modules/service/functions/delete-service-secret.d.ts

@@ -8,4 +8,4 @@ export declare const deleteServiceSecret: import("@astrale-os/sdk/schema").Metho
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
     };
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/delete-service-secret.js

@@ -1,11 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-import { secretName, secretOperationRejection } from '../types/index.js';
-export const deleteServiceSecret = method({
-    description: 'Delete one write-only Service secret.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({ name: secretName }),
-    output: z.union([z.strictObject({ ok: z.literal(true) }), secretOperationRejection]),
-});
+import { deleteServiceSecretContract } from '../types/service-management.js';
+export const deleteServiceSecret = method({ ...deleteServiceSecretContract, abstract: true });

package/dist/schema/modules/service/functions/delete-service.d.ts

@@ -6,4 +6,4 @@ export declare const deleteService: import("@astrale-os/sdk/schema").Method<impo
         kind: "deleting";
         retryAfterMs: number;
     };
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/delete-service.js

@@ -1,16 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-export const deleteService = method({
-    description: 'Convergently delete provider resources and the owned Service without uninstalling consumers.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({}),
-    output: z.discriminatedUnion('kind', [
-        z.strictObject({ kind: z.literal('deleted') }),
-        z.strictObject({
-            kind: z.literal('deleting'),
-            retryAfterMs: z.number().int().min(250).max(30_000),
-        }),
-    ]),
-});
+import { deleteServiceContract } from '../types/service-management.js';
+export const deleteService = method({ ...deleteServiceContract, abstract: true });

package/dist/schema/modules/service/functions/delete-worker-secret.d.ts

@@ -0,0 +1,11 @@
+export declare const deleteWorkerSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    name: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        ok: true;
+    } | {
+        kind: "rejected";
+        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+    };
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/delete-worker-secret.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { deleteServiceSecretContract } from '../types/service-management.js';
+export const deleteWorkerSecret = method({
+    ...deleteServiceSecretContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/delete-worker.d.ts

@@ -0,0 +1,9 @@
+export declare const deleteWorker: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly mode: 'value';
+    readonly value: {
+        kind: "deleted";
+    } | {
+        kind: "deleting";
+        retryAfterMs: number;
+    };
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/delete-worker.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { deleteServiceContract } from '../types/service-management.js';
+export const deleteWorker = method({
+    ...deleteServiceContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/deploy-cloudflare-worker.d.ts

@@ -70,4 +70,4 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";
         message: string;
     };
-}, "authenticated", true, "default">>;
+}, "authenticated", true, false>>;

package/dist/schema/modules/service/functions/index.d.ts

@@ -6,3 +6,10 @@ export { listServiceSchedules } from './list-service-schedules.js';
 export { listServiceSecretNames } from './list-service-secret-names.js';
 export { replaceServiceSchedules } from './replace-service-schedules.js';
 export { setServiceSecret } from './set-service-secret.js';
+export { deleteWorkerSecret } from './delete-worker-secret.js';
+export { deleteWorker } from './delete-worker.js';
+export { listWorkerLogs } from './list-worker-logs.js';
+export { listWorkerSchedules } from './list-worker-schedules.js';
+export { listWorkerSecretNames } from './list-worker-secret-names.js';
+export { replaceWorkerSchedules } from './replace-worker-schedules.js';
+export { setWorkerSecret } from './set-worker-secret.js';

package/dist/schema/modules/service/functions/index.js

@@ -6,3 +6,10 @@ export { listServiceSchedules } from './list-service-schedules.js';
 export { listServiceSecretNames } from './list-service-secret-names.js';
 export { replaceServiceSchedules } from './replace-service-schedules.js';
 export { setServiceSecret } from './set-service-secret.js';
+export { deleteWorkerSecret } from './delete-worker-secret.js';
+export { deleteWorker } from './delete-worker.js';
+export { listWorkerLogs } from './list-worker-logs.js';
+export { listWorkerSchedules } from './list-worker-schedules.js';
+export { listWorkerSecretNames } from './list-worker-secret-names.js';
+export { replaceWorkerSchedules } from './replace-worker-schedules.js';
+export { setWorkerSecret } from './set-worker-secret.js';

package/dist/schema/modules/service/functions/list-service-logs.d.ts

@@ -9,4 +9,4 @@ export declare const listServiceLogs: import("@astrale-os/sdk/schema").Method<im
         level: string;
         line: string;
     }[];
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/list-service-logs.js

@@ -1,13 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-export const listServiceLogs = method({
-    description: 'Read recent Service runtime logs.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({
-        tail: z.number().int().min(1).max(1_000).optional(),
-        since: z.number().int().min(0).optional(),
-    }),
-    output: z.array(z.strictObject({ id: z.string(), ts: z.number(), level: z.string(), line: z.string() })),
-});
+import { listServiceLogsContract } from '../types/service-management.js';
+export const listServiceLogs = method({ ...listServiceLogsContract, abstract: true });

package/dist/schema/modules/service/functions/list-service-schedules.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/list-service-schedules.js

@@ -1,10 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-export const listServiceSchedules = method({
-    description: 'List active Service cron expressions.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({}),
-    output: z.array(z.string()),
-});
+import { listServiceSchedulesContract } from '../types/service-management.js';
+export const listServiceSchedules = method({ ...listServiceSchedulesContract, abstract: true });

package/dist/schema/modules/service/functions/list-service-secret-names.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/list-service-secret-names.js

@@ -1,11 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-import { secretName } from '../types/index.js';
-export const listServiceSecretNames = method({
-    description: 'List write-only Service secret names without exposing values.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({}),
-    output: z.array(secretName),
-});
+import { listServiceSecretNamesContract } from '../types/service-management.js';
+export const listServiceSecretNames = method({ ...listServiceSecretNamesContract, abstract: true });

package/dist/schema/modules/service/functions/list-worker-logs.d.ts

@@ -0,0 +1,12 @@
+export declare const listWorkerLogs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    tail?: number | undefined;
+    since?: number | undefined;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        id: string;
+        ts: number;
+        level: string;
+        line: string;
+    }[];
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/list-worker-logs.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { listServiceLogsContract } from '../types/service-management.js';
+export const listWorkerLogs = method({
+    ...listServiceLogsContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/list-worker-schedules.d.ts

@@ -0,0 +1,4 @@
+export declare const listWorkerSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly mode: 'value';
+    readonly value: string[];
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/list-worker-schedules.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { listServiceSchedulesContract } from '../types/service-management.js';
+export const listWorkerSchedules = method({
+    ...listServiceSchedulesContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/list-worker-secret-names.d.ts

@@ -0,0 +1,4 @@
+export declare const listWorkerSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly mode: 'value';
+    readonly value: string[];
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/list-worker-secret-names.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { listServiceSecretNamesContract } from '../types/service-management.js';
+export const listWorkerSecretNames = method({
+    ...listServiceSecretNamesContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/replace-service-schedules.d.ts

@@ -8,4 +8,4 @@ export declare const replaceServiceSchedules: import("@astrale-os/sdk/schema").M
         kind: "rejected";
         reason: "invalid-schedule" | "service-unavailable";
     };
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/replace-service-schedules.js

@@ -1,16 +1,6 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
+import { replaceServiceSchedulesContract } from '../types/service-management.js';
 export const replaceServiceSchedules = method({
-    description: 'Replace the complete Service cron set.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({ crons: z.array(z.string()).max(24) }),
-    output: z.union([
-        z.strictObject({ crons: z.array(z.string()) }),
-        z.strictObject({
-            kind: z.literal('rejected'),
-            reason: z.enum(['invalid-schedule', 'service-unavailable']),
-        }),
-    ]),
+    ...replaceServiceSchedulesContract,
+    abstract: true,
 });

package/dist/schema/modules/service/functions/replace-worker-schedules.d.ts

@@ -0,0 +1,11 @@
+export declare const replaceWorkerSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    crons: string[];
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        crons: string[];
+    } | {
+        kind: "rejected";
+        reason: "invalid-schedule" | "service-unavailable";
+    };
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/replace-worker-schedules.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { replaceServiceSchedulesContract } from '../types/service-management.js';
+export const replaceWorkerSchedules = method({
+    ...replaceServiceSchedulesContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/set-service-secret.d.ts

@@ -4,9 +4,9 @@ export declare const setServiceSecret: import("@astrale-os/sdk/schema").Method<i
 }, {
     readonly mode: 'value';
     readonly value: {
-        name: string;
-    } | {
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+    } | {
+        name: string;
     };
-}, "authorized", false, "default">>;
+}, "authorized", false, true>>;

package/dist/schema/modules/service/functions/set-service-secret.js

@@ -1,17 +1,3 @@
 import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { OwnService } from '../policies/own-service.js';
-import { secretName, secretOperationRejection } from '../types/index.js';
-export const setServiceSecret = method({
-    description: 'Set one write-only Service secret.',
-    auth: 'authorized',
-    policy: ({ check, self }) => check(OwnService, self),
-    input: z.strictObject({
-        name: secretName,
-        value: z
-            .string()
-            .min(1)
-            .max(64 * 1024),
-    }),
-    output: z.union([z.strictObject({ name: secretName }), secretOperationRejection]),
-});
+import { setServiceSecretContract } from '../types/service-management.js';
+export const setServiceSecret = method({ ...setServiceSecretContract, abstract: true });

package/dist/schema/modules/service/functions/set-worker-secret.d.ts

@@ -0,0 +1,12 @@
+export declare const setWorkerSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    name: string;
+    value: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        kind: "rejected";
+        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+    } | {
+        name: string;
+    };
+}, "authorized", false, false>>;

package/dist/schema/modules/service/functions/set-worker-secret.js

@@ -0,0 +1,7 @@
+import { method } from '@astrale-os/sdk/schema';
+import { OwnService } from '../policies/own-service.js';
+import { setServiceSecretContract } from '../types/service-management.js';
+export const setWorkerSecret = method({
+    ...setServiceSecretContract,
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/types/deploy-cloudflare-worker.js

@@ -1,5 +1,7 @@
 import { z } from 'zod';
-import { artifactModule, assetBundle, resourceLimits } from '../types/index.js';
+import { artifactModule } from './service-deployment-artifact-module.js';
+import { assetBundle } from './service-deployment-assets.js';
+import { resourceLimits } from './service-deployment-resource-limits.js';
 import { serviceReadiness } from './service-readiness.js';
 export const artifact = z.strictObject({
     entry: z.string().min(1).max(256),

package/dist/schema/modules/service/types/index.d.ts

@@ -10,3 +10,4 @@ export type { ResourceLimits } from './service-deployment-resource-limits.js';
 export { secretName } from './service-secret-name.js';
 export { secretOperationRejection } from './service-secret-operation-rejection.js';
 export { serviceReadiness } from './service-readiness.js';
+export { setServiceSecretContract, deleteServiceSecretContract, listServiceSecretNamesContract, replaceServiceSchedulesContract, listServiceSchedulesContract, listServiceLogsContract, deleteServiceContract, } from './service-management.js';

package/dist/schema/modules/service/types/index.js

@@ -6,3 +6,4 @@ export { resourceLimits } from './service-deployment-resource-limits.js';
 export { secretName } from './service-secret-name.js';
 export { secretOperationRejection } from './service-secret-operation-rejection.js';
 export { serviceReadiness } from './service-readiness.js';
+export { setServiceSecretContract, deleteServiceSecretContract, listServiceSecretNamesContract, replaceServiceSchedulesContract, listServiceSchedulesContract, listServiceLogsContract, deleteServiceContract, } from './service-management.js';