@astrale-domains/services 0.4.4 → 0.4.6

package/dist/schema/modules/service/classes/cloudflare-worker.d.ts

@@ -10,9 +10,9 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
         readonly properties: {
             providerName: z.ZodString;
             serviceKey: z.ZodString;
-            url: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+            url: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
                 readonly required: false;
-            }, never>;
+            }>;
             state: import("@astrale-os/sdk/schema").StateProperty<import("@astrale-os/sdk/schema").StateMachine<{
                 readonly deploying: {
                     readonly recordProviderDeployment: "reconciling";
@@ -38,21 +38,21 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 required?: boolean;
                 description?: string;
             }>;
-            digest: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+            digest: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
                 readonly required: false;
-            }, never>;
-            deploymentReceipt: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+            }>;
+            deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
                 readonly required: false;
-            }, never>;
-            operationExpiresAt: import("@astrale-os/sdk/schema").Property<Readonly<{
+            }>;
+            operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
                 readonly type: 'string';
                 readonly 'x-astrale-value-kind': 'instant';
             }>, {
                 readonly required: false;
-            }, never>;
-            error: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+            }>;
+            error: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
                 readonly required: false;
-            }, never>;
+            }>;
         };
         readonly methods: {
             setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -61,12 +61,12 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
             }, {
                 readonly mode: 'value';
                 readonly value: {
-                    name: string;
-                } | {
                     kind: "rejected";
                     reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+                } | {
+                    name: string;
                 };
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                 name: string;
             }, {
@@ -77,11 +77,11 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 } | {
                     ok: true;
                 };
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                 readonly mode: 'value';
                 readonly value: string[];
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                 crons: string[];
             }, {
@@ -92,11 +92,11 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                     kind: "rejected";
                     reason: "invalid-schedule" | "service-unavailable";
                 };
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                 readonly mode: 'value';
                 readonly value: string[];
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                 tail?: number | undefined;
                 since?: number | undefined;
@@ -108,7 +108,7 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                     level: string;
                     line: string;
                 }[];
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
             delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                 readonly mode: 'value';
                 readonly value: {
@@ -117,7 +117,7 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                     kind: "deleting";
                     retryAfterMs: number;
                 };
-            }, "authorized", false, true>>;
+            }, "authorized", false, true, undefined>>;
         };
     }>];
     readonly properties: {
@@ -125,28 +125,46 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
             plain: "plain";
             revisioned: "revisioned";
         }>;
-        tenantDomainState: import("@astrale-os/sdk/schema").Property<z.ZodEnum<{
+        tenantDomainDetachedAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
+            readonly type: 'string';
+            readonly 'x-astrale-value-kind': 'instant';
+        }>, {
+            readonly required: false;
+        }>;
+        tenantDomainState: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodEnum<{
             absent: "absent";
             attached: "attached";
             unresolved: "unresolved";
         }>, {
             readonly required: false;
-        }, never>;
-        tenantDomainId: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        }>;
+        tenantDomainId: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
-        tenantCertificatePackId: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        }>;
+        tenantCertificatePackId: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
-        tenantZoneId: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        }>;
+        tenantZoneId: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
+        }>;
     };
     readonly methods: {
         deploy: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name?: string | undefined;
             entry?: string | undefined;
             modules?: ({
+                name: string;
+                kind?: "data" | "esm" | "text" | "wasm" | undefined;
+                content: {
+                    encoding: "gzip" | "identity";
+                    decodedSize: number;
+                    contentBase64: string;
+                } | {
+                    encoding: "gzip" | "identity";
+                    decodedSize: number;
+                    contentBase64Chunks: string[];
+                };
+            } | {
                 contentBase64: string;
                 name: string;
                 kind?: "data" | "esm" | "text" | "wasm" | undefined;
@@ -160,6 +178,18 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 release: {
                     entry: string;
                     modules: ({
+                        name: string;
+                        kind?: "data" | "esm" | "text" | "wasm" | undefined;
+                        content: {
+                            encoding: "gzip" | "identity";
+                            decodedSize: number;
+                            contentBase64: string;
+                        } | {
+                            encoding: "gzip" | "identity";
+                            decodedSize: number;
+                            contentBase64Chunks: string[];
+                        };
+                    } | {
                         contentBase64: string;
                         name: string;
                         kind?: "data" | "esm" | "text" | "wasm" | undefined;
@@ -184,6 +214,18 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
             secrets?: Record<string, string> | undefined;
             assets?: {
                 files: ({
+                    path: string;
+                    contentType?: string | undefined;
+                    content: {
+                        encoding: "gzip" | "identity";
+                        decodedSize: number;
+                        contentBase64: string;
+                    } | {
+                        encoding: "gzip" | "identity";
+                        decodedSize: number;
+                        contentBase64Chunks: string[];
+                    };
+                } | {
                     contentBase64: string;
                     path: string;
                     contentType?: string | undefined;
@@ -215,19 +257,43 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";
                 message: string;
             };
-        }, "authenticated", true, false>>;
+        }, "authenticated", true, false, undefined>>;
+        migrateIngress: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            action: "complete" | "detach" | "restore";
+            probe: {
+                path: string;
+                status: number;
+                bodySha256: string;
+            };
+        }, {
+            readonly mode: 'value';
+            readonly value: {
+                kind: "detached";
+                detachedAt: string;
+            } | {
+                kind: "migrated";
+            } | {
+                kind: "restored";
+            } | {
+                kind: "pending";
+                retryAfterMs: number;
+            } | {
+                kind: "rejected";
+                reason: "missing-location" | "not-detached" | "service-unavailable";
+            };
+        }, "authorized", false, false, undefined>>;
         setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
             value: string;
         }, {
             readonly mode: 'value';
             readonly value: {
-                name: string;
-            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+            } | {
+                name: string;
             };
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
         }, {
@@ -238,11 +304,11 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
             } | {
                 ok: true;
             };
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             crons: string[];
         }, {
@@ -253,11 +319,11 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 kind: "rejected";
                 reason: "invalid-schedule" | "service-unavailable";
             };
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             tail?: number | undefined;
             since?: number | undefined;
@@ -269,7 +335,7 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 level: string;
                 line: string;
             }[];
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
         delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
@@ -278,7 +344,7 @@ export declare const CloudflareWorker: import("@astrale-os/sdk/schema").Authored
                 kind: "deleting";
                 retryAfterMs: number;
             };
-        }, "authorized", false, false>>;
+        }, "authorized", false, false, undefined>>;
     };
     readonly policies: {
         read: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/service/classes/cloudflare-worker.js

@@ -1,4 +1,4 @@
-import { classIcon, nodeClass, property } from '@astrale-os/sdk/schema';
+import { classIcon, nodeClass, property, schema as valueSchema } from '@astrale-os/sdk/schema';
 import { CloudCog } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
 import { deleteWorkerSecret } from '../functions/delete-worker-secret.js';
@@ -7,6 +7,7 @@ import { deployCloudflareWorker } from '../functions/deploy-cloudflare-worker.js
 import { listWorkerLogs } from '../functions/list-worker-logs.js';
 import { listWorkerSchedules } from '../functions/list-worker-schedules.js';
 import { listWorkerSecretNames } from '../functions/list-worker-secret-names.js';
+import { migrateWorkerIngress } from '../functions/migrate-worker-ingress.js';
 import { replaceWorkerSchedules } from '../functions/replace-worker-schedules.js';
 import { setWorkerSecret } from '../functions/set-worker-secret.js';
 import { OwnService } from '../policies/own-service.js';
@@ -17,6 +18,7 @@ export const CloudflareWorker = nodeClass({
     extends: [Service],
     properties: {
         deploymentMode: z.enum(['plain', 'revisioned']),
+        tenantDomainDetachedAt: property(valueSchema.values.instant, { required: false }),
         tenantDomainState: property(z.enum(['unresolved', 'absent', 'attached']), {
             required: false,
         }),
@@ -26,6 +28,7 @@ export const CloudflareWorker = nodeClass({
     },
     methods: {
         deploy: deployCloudflareWorker,
+        migrateIngress: migrateWorkerIngress,
         setSecret: setWorkerSecret,
         deleteSecret: deleteWorkerSecret,
         secrets: listWorkerSecretNames,

package/dist/schema/modules/service/classes/service.d.ts

@@ -8,9 +8,9 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
     readonly properties: {
         providerName: z.ZodString;
         serviceKey: z.ZodString;
-        url: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        url: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
+        }>;
         state: import("@astrale-os/sdk/schema").StateProperty<import("@astrale-os/sdk/schema").StateMachine<{
             readonly deploying: {
                 readonly recordProviderDeployment: "reconciling";
@@ -36,21 +36,21 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
             required?: boolean;
             description?: string;
         }>;
-        digest: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        digest: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
-        deploymentReceipt: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        }>;
+        deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
-        operationExpiresAt: import("@astrale-os/sdk/schema").Property<Readonly<{
+        }>;
+        operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
             readonly type: 'string';
             readonly 'x-astrale-value-kind': 'instant';
         }>, {
             readonly required: false;
-        }, never>;
-        error: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+        }>;
+        error: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
-        }, never>;
+        }>;
     };
     readonly methods: {
         setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -59,12 +59,12 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
         }, {
             readonly mode: 'value';
             readonly value: {
+                name: string;
+            } | {
                 kind: "rejected";
                 reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-            } | {
-                name: string;
             };
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
         }, {
@@ -75,11 +75,11 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
             } | {
                 ok: true;
             };
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             crons: string[];
         }, {
@@ -90,11 +90,11 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
                 kind: "rejected";
                 reason: "invalid-schedule" | "service-unavailable";
             };
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             tail?: number | undefined;
             since?: number | undefined;
@@ -106,7 +106,7 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
                 level: string;
                 line: string;
             }[];
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
         delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
@@ -115,6 +115,6 @@ export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass
                 kind: "deleting";
                 retryAfterMs: number;
             };
-        }, "authorized", false, true>>;
+        }, "authorized", false, true, undefined>>;
     };
 }>;

package/dist/schema/modules/service/functions/delete-service-secret.d.ts

@@ -8,4 +8,4 @@ export declare const deleteServiceSecret: import("@astrale-os/sdk/schema").Metho
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
     };
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/delete-service.d.ts

@@ -6,4 +6,4 @@ export declare const deleteService: import("@astrale-os/sdk/schema").Method<impo
         kind: "deleting";
         retryAfterMs: number;
     };
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/delete-worker-secret.d.ts

@@ -8,4 +8,4 @@ export declare const deleteWorkerSecret: import("@astrale-os/sdk/schema").Method
         kind: "rejected";
         reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
     };
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/delete-worker.d.ts

@@ -6,4 +6,4 @@ export declare const deleteWorker: import("@astrale-os/sdk/schema").Method<impor
         kind: "deleting";
         retryAfterMs: number;
     };
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/deploy-cloudflare-worker.d.ts

@@ -2,6 +2,18 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
     name?: string | undefined;
     entry?: string | undefined;
     modules?: ({
+        name: string;
+        kind?: "data" | "esm" | "text" | "wasm" | undefined;
+        content: {
+            encoding: "gzip" | "identity";
+            decodedSize: number;
+            contentBase64: string;
+        } | {
+            encoding: "gzip" | "identity";
+            decodedSize: number;
+            contentBase64Chunks: string[];
+        };
+    } | {
         contentBase64: string;
         name: string;
         kind?: "data" | "esm" | "text" | "wasm" | undefined;
@@ -15,6 +27,18 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         release: {
             entry: string;
             modules: ({
+                name: string;
+                kind?: "data" | "esm" | "text" | "wasm" | undefined;
+                content: {
+                    encoding: "gzip" | "identity";
+                    decodedSize: number;
+                    contentBase64: string;
+                } | {
+                    encoding: "gzip" | "identity";
+                    decodedSize: number;
+                    contentBase64Chunks: string[];
+                };
+            } | {
                 contentBase64: string;
                 name: string;
                 kind?: "data" | "esm" | "text" | "wasm" | undefined;
@@ -39,6 +63,18 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
     secrets?: Record<string, string> | undefined;
     assets?: {
         files: ({
+            path: string;
+            contentType?: string | undefined;
+            content: {
+                encoding: "gzip" | "identity";
+                decodedSize: number;
+                contentBase64: string;
+            } | {
+                encoding: "gzip" | "identity";
+                decodedSize: number;
+                contentBase64Chunks: string[];
+            };
+        } | {
             contentBase64: string;
             path: string;
             contentType?: string | undefined;
@@ -70,4 +106,4 @@ export declare const deployCloudflareWorker: import("@astrale-os/sdk/schema").Me
         reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";
         message: string;
     };
-}, "authenticated", true, false>>;
+}, "authenticated", true, false, undefined>>;

package/dist/schema/modules/service/functions/index.d.ts

@@ -1,3 +1,4 @@
+export { migrateWorkerIngress } from './migrate-worker-ingress.js';
 export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
 export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';

package/dist/schema/modules/service/functions/index.js

@@ -1,3 +1,4 @@
+export { migrateWorkerIngress } from './migrate-worker-ingress.js';
 export { deleteServiceSecret } from './delete-service-secret.js';
 export { deleteService } from './delete-service.js';
 export { deployCloudflareWorker } from './deploy-cloudflare-worker.js';

package/dist/schema/modules/service/functions/list-service-logs.d.ts

@@ -9,4 +9,4 @@ export declare const listServiceLogs: import("@astrale-os/sdk/schema").Method<im
         level: string;
         line: string;
     }[];
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/list-service-schedules.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/list-service-secret-names.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/list-worker-logs.d.ts

@@ -9,4 +9,4 @@ export declare const listWorkerLogs: import("@astrale-os/sdk/schema").Method<imp
         level: string;
         line: string;
     }[];
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/list-worker-schedules.d.ts

@@ -1,4 +1,4 @@
 export declare const listWorkerSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/list-worker-secret-names.d.ts

@@ -1,4 +1,4 @@
 export declare const listWorkerSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/migrate-worker-ingress.d.ts

@@ -0,0 +1,24 @@
+export declare const migrateWorkerIngress: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+    action: "complete" | "detach" | "restore";
+    probe: {
+        path: string;
+        status: number;
+        bodySha256: string;
+    };
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        kind: "detached";
+        detachedAt: string;
+    } | {
+        kind: "migrated";
+    } | {
+        kind: "restored";
+    } | {
+        kind: "pending";
+        retryAfterMs: number;
+    } | {
+        kind: "rejected";
+        reason: "missing-location" | "not-detached" | "service-unavailable";
+    };
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/migrate-worker-ingress.js

@@ -0,0 +1,26 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { OwnService } from '../policies/own-service.js';
+export const migrateWorkerIngress = method({
+    description: 'Migrate legacy ingress to the shared wildcard, retaining cleanup evidence until verified; optionally restore the domain before finalization.',
+    auth: 'authorized',
+    input: z.strictObject({
+        action: z.enum(['detach', 'complete', 'restore']),
+        probe: z.strictObject({
+            path: z.string().min(1).max(1024),
+            status: z.number().int().min(200).max(299),
+            bodySha256: z.string().min(64).max(64),
+        }),
+    }),
+    output: z.discriminatedUnion('kind', [
+        z.strictObject({ kind: z.literal('detached'), detachedAt: z.string().min(20).max(30) }),
+        z.strictObject({ kind: z.literal('migrated') }),
+        z.strictObject({ kind: z.literal('restored') }),
+        z.strictObject({ kind: z.literal('pending'), retryAfterMs: z.number().int().positive() }),
+        z.strictObject({
+            kind: z.literal('rejected'),
+            reason: z.enum(['service-unavailable', 'missing-location', 'not-detached']),
+        }),
+    ]),
+    policy: ({ check, self }) => check(OwnService, self),
+});

package/dist/schema/modules/service/functions/replace-service-schedules.d.ts

@@ -8,4 +8,4 @@ export declare const replaceServiceSchedules: import("@astrale-os/sdk/schema").M
         kind: "rejected";
         reason: "invalid-schedule" | "service-unavailable";
     };
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;

package/dist/schema/modules/service/functions/replace-worker-schedules.d.ts

@@ -8,4 +8,4 @@ export declare const replaceWorkerSchedules: import("@astrale-os/sdk/schema").Me
         kind: "rejected";
         reason: "invalid-schedule" | "service-unavailable";
     };
-}, "authorized", false, false>>;
+}, "authorized", false, false, undefined>>;

package/dist/schema/modules/service/functions/set-service-secret.d.ts

@@ -9,4 +9,4 @@ export declare const setServiceSecret: import("@astrale-os/sdk/schema").Method<i
     } | {
         name: string;
     };
-}, "authorized", false, true>>;
+}, "authorized", false, true, undefined>>;