@astrale-domains/services 0.4.8 → 0.5.0

package/dist/schema/schema.d.ts

@@ -4,339 +4,118 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
     readonly classes: {
         readonly Service: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly abstract: true;
-            readonly description: "One caller-owned provider-neutral deployed Service.";
+            readonly description: "One deployed Service: a stable name and URL serving its current deployment.";
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
-            readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">, import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
+            readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
             readonly properties: {
-                providerName: import("zod").ZodString;
-                serviceKey: import("zod").ZodString;
-                url: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
+                origin: import("zod").ZodString;
+                environment: import("zod").ZodString;
+                fingerprint: import("zod").ZodString;
+                url: import("zod").ZodString;
                 state: import("@astrale-os/sdk/schema").StateProperty<import("@astrale-os/sdk/schema").StateMachine<{
-                    readonly deploying: {
-                        readonly recordProviderDeployment: "reconciling";
-                        readonly failDeployment: "failed";
-                        readonly rejectDeployment: "ready";
-                        readonly deleteService: "deleting";
-                    };
-                    readonly reconciling: {
-                        readonly retryDeployment: "deploying";
-                        readonly completeDeployment: "ready";
-                        readonly deleteService: "deleting";
-                    };
-                    readonly ready: {
-                        readonly redeploy: "deploying";
-                        readonly deleteService: "deleting";
-                    };
-                    readonly failed: {
-                        readonly retryDeployment: "deploying";
-                        readonly deleteService: "deleting";
+                    readonly active: {
+                        readonly delete: "deleting";
                     };
                     readonly deleting: {};
-                }, "deploying">, {
+                }, "active">, {
                     required?: boolean;
                     description?: string;
                 }>;
-                digest: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-                deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-                operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                    readonly type: 'string';
-                    readonly 'x-astrale-value-kind': 'instant';
-                }>, {
-                    readonly required: false;
-                }>;
-                error: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-            };
-            readonly methods: {
-                setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name: string;
-                    value: string;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        kind: "rejected";
-                        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-                    } | {
-                        name: string;
-                    };
-                }, "authorized", false, true, undefined>>;
-                deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name: string;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        ok: true;
-                    } | {
-                        kind: "rejected";
-                        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-                    };
-                }, "authorized", false, true, undefined>>;
-                secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: string[];
-                }, "authorized", false, true, undefined>>;
-                setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    crons: string[];
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        crons: string[];
-                    } | {
-                        kind: "rejected";
-                        reason: "invalid-schedule" | "service-unavailable";
-                    };
-                }, "authorized", false, true, undefined>>;
-                schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: string[];
-                }, "authorized", false, true, undefined>>;
-                logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    tail?: number | undefined;
-                    since?: number | undefined;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        id: string;
-                        ts: number;
-                        level: string;
-                        line: string;
-                    }[];
-                }, "authorized", false, true, undefined>>;
-                delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        kind: "deleted";
-                    } | {
-                        kind: "deleting";
-                        retryAfterMs: number;
-                    };
-                }, "authorized", false, true, undefined>>;
             };
         }>;
-        readonly CloudflareWorker: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
-            readonly description: "One Service placed in a Cloudflare Workers dispatch namespace.";
+        readonly CloudflareService: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
+            readonly description: "One Service whose deployments are Cloudflare Workers for Platforms scripts.";
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly extends: readonly [import("@astrale-os/sdk/schema").AuthoredNodeClass<{
                 readonly abstract: true;
-                readonly description: "One caller-owned provider-neutral deployed Service.";
+                readonly description: "One deployed Service: a stable name and URL serving its current deployment.";
                 readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
-                readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">, import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
+                readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
                 readonly properties: {
-                    providerName: import("zod").ZodString;
-                    serviceKey: import("zod").ZodString;
-                    url: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                        readonly required: false;
-                    }>;
+                    origin: import("zod").ZodString;
+                    environment: import("zod").ZodString;
+                    fingerprint: import("zod").ZodString;
+                    url: import("zod").ZodString;
                     state: import("@astrale-os/sdk/schema").StateProperty<import("@astrale-os/sdk/schema").StateMachine<{
-                        readonly deploying: {
-                            readonly recordProviderDeployment: "reconciling";
-                            readonly failDeployment: "failed";
-                            readonly rejectDeployment: "ready";
-                            readonly deleteService: "deleting";
-                        };
-                        readonly reconciling: {
-                            readonly retryDeployment: "deploying";
-                            readonly completeDeployment: "ready";
-                            readonly deleteService: "deleting";
-                        };
-                        readonly ready: {
-                            readonly redeploy: "deploying";
-                            readonly deleteService: "deleting";
-                        };
-                        readonly failed: {
-                            readonly retryDeployment: "deploying";
-                            readonly deleteService: "deleting";
+                        readonly active: {
+                            readonly delete: "deleting";
                         };
                         readonly deleting: {};
-                    }, "deploying">, {
+                    }, "active">, {
                         required?: boolean;
                         description?: string;
                     }>;
-                    digest: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                        readonly required: false;
-                    }>;
-                    deploymentReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                        readonly required: false;
-                    }>;
-                    operationExpiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                        readonly type: 'string';
-                        readonly 'x-astrale-value-kind': 'instant';
-                    }>, {
-                        readonly required: false;
-                    }>;
-                    error: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                        readonly required: false;
-                    }>;
-                };
-                readonly methods: {
-                    setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                        name: string;
-                        value: string;
-                    }, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            kind: "rejected";
-                            reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-                        } | {
-                            name: string;
-                        };
-                    }, "authorized", false, true, undefined>>;
-                    deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                        name: string;
-                    }, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            ok: true;
-                        } | {
-                            kind: "rejected";
-                            reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
-                        };
-                    }, "authorized", false, true, undefined>>;
-                    secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                        readonly mode: 'value';
-                        readonly value: string[];
-                    }, "authorized", false, true, undefined>>;
-                    setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                        crons: string[];
-                    }, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            crons: string[];
-                        } | {
-                            kind: "rejected";
-                            reason: "invalid-schedule" | "service-unavailable";
-                        };
-                    }, "authorized", false, true, undefined>>;
-                    schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                        readonly mode: 'value';
-                        readonly value: string[];
-                    }, "authorized", false, true, undefined>>;
-                    logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                        tail?: number | undefined;
-                        since?: number | undefined;
-                    }, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            id: string;
-                            ts: number;
-                            level: string;
-                            line: string;
-                        }[];
-                    }, "authorized", false, true, undefined>>;
-                    delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            kind: "deleted";
-                        } | {
-                            kind: "deleting";
-                            retryAfterMs: number;
-                        };
-                    }, "authorized", false, true, undefined>>;
                 };
             }>];
-            readonly properties: {
-                deploymentMode: import("zod").ZodEnum<{
-                    plain: "plain";
-                    revisioned: "revisioned";
-                }>;
-                tenantDomainDetachedAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                    readonly type: 'string';
-                    readonly 'x-astrale-value-kind': 'instant';
-                }>, {
-                    readonly required: false;
-                }>;
-                tenantDomainState: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodEnum<{
-                    absent: "absent";
-                    attached: "attached";
-                    unresolved: "unresolved";
-                }>, {
-                    readonly required: false;
-                }>;
-                tenantDomainId: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-                tenantCertificatePackId: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-                tenantZoneId: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
-                    readonly required: false;
-                }>;
-            };
             readonly methods: {
                 deploy: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name?: string | undefined;
-                    entry?: string | undefined;
-                    modules?: ({
-                        name: string;
-                        kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                        content: {
-                            encoding: "gzip" | "identity";
-                            decodedSize: number;
-                            contentBase64: string;
-                        } | {
-                            encoding: "gzip" | "identity";
-                            decodedSize: number;
-                            contentBase64Chunks: string[];
+                    format: "astrale.services.deployment-request";
+                    version: 1;
+                    owner?: string | undefined;
+                    origin: string;
+                    environment: string;
+                    addressing: "opaque";
+                    label: string;
+                    buildDigest: string;
+                    configuration: {
+                        format: "astrale.deployment.configuration";
+                        version: 1;
+                        vars: Record<string, string>;
+                        settings: {
+                            maximumRequestBytes: number;
+                            invocationTimeoutMs: number;
+                            tokenExchange: false | {
+                                maximumLifetimeSeconds: number;
+                            };
+                            durableOptions?: {
+                                retentionMs?: number | undefined;
+                                retry?: {
+                                    initialIntervalMs?: number | undefined;
+                                    maxAttempts?: number | undefined;
+                                    maxIntervalMs?: number | undefined;
+                                } | undefined;
+                                stepTimeoutMs?: number | undefined;
+                            } | undefined;
                         };
-                    } | {
-                        contentBase64: string;
-                        name: string;
-                        kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                    } | {
-                        contentBase64Chunks: string[];
-                        name: string;
-                        kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                    })[] | undefined;
-                    revisioned?: {
-                        requiredSecrets: string[];
-                        release: {
-                            entry: string;
-                            modules: ({
-                                name: string;
-                                kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                                content: {
-                                    encoding: "gzip" | "identity";
-                                    decodedSize: number;
-                                    contentBase64: string;
-                                } | {
-                                    encoding: "gzip" | "identity";
-                                    decodedSize: number;
-                                    contentBase64Chunks: string[];
-                                };
-                            } | {
-                                contentBase64: string;
+                        runtime: {
+                            compatibilityDate: string;
+                            compatibilityFlags: string[];
+                        };
+                        bindings: {
+                            services: {
                                 name: string;
-                                kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                            } | {
-                                contentBase64Chunks: string[];
+                                service: string;
+                            }[];
+                            dispatchNamespaces: {
                                 name: string;
-                                kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                            })[];
+                                namespace: string;
+                            }[];
+                            secrets: string[];
                         };
-                        readiness?: {
-                            paths: string[];
-                            required?: boolean | undefined;
-                        } | undefined;
-                    } | undefined;
-                    compatibilityDate?: string | undefined;
-                    compatibilityFlags?: string[] | undefined;
-                    serviceBindings?: {
-                        name: string;
-                        service: string;
-                    }[] | undefined;
-                    vars?: Record<string, string> | undefined;
-                    secrets?: Record<string, string> | undefined;
-                    assets?: {
-                        files: ({
-                            path: string;
-                            contentType?: string | undefined;
+                        router: false | {
+                            service: string;
+                            hostSuffix: string;
+                            minLabels: number;
+                        };
+                    };
+                    record: {
+                        releaseDigest: string;
+                        schemaRevision: string;
+                        schemaBundle: string;
+                        commit: {
+                            sha: string;
+                            dirty: boolean;
+                            base?: {
+                                version: string;
+                                distance: number;
+                            } | undefined;
+                        } | null;
+                    };
+                    bundle: {
+                        entrypoint: string;
+                        modules: {
+                            name: string;
+                            kind?: "data" | "esm" | "text" | "wasm" | undefined;
                             content: {
                                 encoding: "gzip" | "identity";
                                 decodedSize: number;
@@ -346,90 +125,182 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                                 decodedSize: number;
                                 contentBase64Chunks: string[];
                             };
-                        } | {
-                            contentBase64: string;
-                            path: string;
-                            contentType?: string | undefined;
-                        } | {
-                            contentBase64Chunks: string[];
-                            path: string;
-                            contentType?: string | undefined;
-                        })[];
-                        notFound?: "404-page" | "none" | "single-page-application" | undefined;
-                        runWorkerFirst?: boolean | undefined;
-                        htmlHandling?: "none" | undefined;
-                    } | undefined;
-                    limits?: {
-                        cpuMs?: number | undefined;
-                        subrequests?: number | undefined;
+                        }[];
+                        assets?: {
+                            files: {
+                                path: string;
+                                contentType?: string | undefined;
+                                content: {
+                                    encoding: "gzip" | "identity";
+                                    decodedSize: number;
+                                    contentBase64: string;
+                                } | {
+                                    encoding: "gzip" | "identity";
+                                    decodedSize: number;
+                                    contentBase64Chunks: string[];
+                                };
+                            }[];
+                            notFound?: "404-page" | "none" | "single-page-application" | undefined;
+                            runWorkerFirst?: boolean | undefined;
+                            htmlHandling?: "none" | undefined;
+                        } | undefined;
+                    };
+                    secrets: Record<string, string>;
+                    promote?: boolean | undefined;
+                    readiness?: {
+                        paths: string[];
                     } | undefined;
-                    serviceKey: string;
                 }, {
                     readonly mode: 'value';
                     readonly value: {
-                        id: string;
-                        serviceKey: string;
-                        url: string;
-                        digest: string;
-                        state: "ready";
-                        candidateReadiness?: "passed" | "unavailable-retained-secrets" | undefined;
-                    } | {
                         kind: "rejected";
-                        reason: "artifact-mode-conflict" | "invalid-deployment" | "service-unavailable";
+                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "service-owned-elsewhere" | "service-unavailable";
                         message: string;
+                        retryAfter?: string | undefined;
+                    } | {
+                        kind: "deployed";
+                        state: "created" | "reused";
+                        secrets: {
+                            state: "bound" | "unchanged" | "updated";
+                        };
+                        deployment: {
+                            id: string;
+                            url: string;
+                            label: string;
+                            serviceId: string;
+                            service: string;
+                            owner: string;
+                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
+                            current: boolean;
+                            createdAt: string;
+                            retiredAt?: string | undefined;
+                            signingKeyId: string;
+                            record: {
+                                format: "astrale.deployment-record";
+                                version: 1;
+                                origin: string;
+                                environment: string;
+                                releaseDigest: string;
+                                buildDigest: string;
+                                schemaRevision: string;
+                                configuration: string;
+                                providerScript: string;
+                                commit: {
+                                    sha: string;
+                                    dirty: boolean;
+                                    base?: {
+                                        version: string;
+                                        distance: number;
+                                    } | undefined;
+                                } | null;
+                            };
+                        };
                     };
                 }, "authenticated", true, false, undefined>>;
-                migrateIngress: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    action: "complete" | "detach" | "restore";
-                    probe: {
-                        path: string;
-                        status: number;
-                        bodySha256: string;
+                hosting: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+                    readonly mode: 'value';
+                    readonly value: {
+                        routingDomain: string;
+                        addressing: "opaque";
                     };
+                }, "authenticated", true, false, undefined>>;
+                list: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    origin?: string | undefined;
+                    environment?: string | undefined;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: {
+                        deployments: ({
+                            id: string;
+                            url: string;
+                            label: string;
+                            serviceId: string;
+                            service: string;
+                            owner: string;
+                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
+                            current: boolean;
+                            createdAt: string;
+                            retiredAt?: string | undefined;
+                            signingKeyId: string;
+                            record: {
+                                format: "astrale.deployment-record";
+                                version: 1;
+                                origin: string;
+                                environment: string;
+                                releaseDigest: string;
+                                buildDigest: string;
+                                schemaRevision: string;
+                                configuration: string;
+                                providerScript: string;
+                                commit: {
+                                    sha: string;
+                                    dirty: boolean;
+                                    base?: {
+                                        version: string;
+                                        distance: number;
+                                    } | undefined;
+                                } | null;
+                            };
+                        } | {
+                            id: string;
+                            url: string;
+                            label: string;
+                            serviceId: string;
+                            service: string;
+                            owner: string;
+                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
+                            current: boolean;
+                            createdAt: string;
+                            retiredAt?: string | undefined;
+                            signingKeyId: string;
+                            record: unknown;
+                        })[];
+                    };
+                }, "authenticated", true, false, undefined>>;
+                promote: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    label: string;
                 }, {
                     readonly mode: 'value';
                     readonly value: {
-                        kind: "detached";
-                        detachedAt: string;
-                    } | {
-                        kind: "migrated";
-                    } | {
-                        kind: "restored";
-                    } | {
-                        kind: "pending";
-                        retryAfterMs: number;
-                    } | {
                         kind: "rejected";
-                        reason: "missing-location" | "not-detached" | "service-unavailable";
+                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "service-owned-elsewhere" | "service-unavailable";
+                        message: string;
+                        retryAfter?: string | undefined;
+                    } | {
+                        current: string;
                     };
-                }, "authorized", false, false, undefined>>;
-                setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name: string;
-                    value: string;
+                }, "authenticated", false, false, undefined>>;
+                transfer: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    owner: string;
                 }, {
                     readonly mode: 'value';
                     readonly value: {
                         kind: "rejected";
-                        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "service-owned-elsewhere" | "service-unavailable";
+                        message: string;
+                        retryAfter?: string | undefined;
                     } | {
-                        name: string;
+                        owner: string;
                     };
-                }, "authorized", false, false, undefined>>;
-                deleteSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                }, "authenticated", false, false, undefined>>;
+                setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     name: string;
+                    value: string;
                 }, {
                     readonly mode: 'value';
                     readonly value: {
-                        ok: true;
+                        name: string;
                     } | {
                         kind: "rejected";
-                        reason: "binding-unavailable" | "invalid-secret-name" | "service-unavailable";
+                        reason: "secret-undeclared" | "service-unavailable";
+                        message: string;
+                        retryAfter?: string | undefined;
                     };
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
                 secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: string[];
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
                 setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     crons: string[];
                 }, {
@@ -440,12 +311,13 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         kind: "rejected";
                         reason: "invalid-schedule" | "service-unavailable";
                     };
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
                 schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: string[];
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
                 logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    label?: string | undefined;
                     tail?: number | undefined;
                     since?: number | undefined;
                 }, {
@@ -456,7 +328,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         level: string;
                         line: string;
                     }[];
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
                 delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: {
@@ -465,10 +337,10 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         kind: "deleting";
                         retryAfterMs: number;
                     };
-                }, "authorized", false, false, undefined>>;
+                }, "authenticated", false, false, undefined>>;
             };
             readonly policies: {
-                read: import("@astrale-os/sdk/schema").Policy;
+                read: () => import("@astrale-os/sdk/schema").Policy;
             };
         }>;
         readonly service_owned_by: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
@@ -487,23 +359,9 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
-        readonly DeploymentLine: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
-            readonly description: "The deployment line of one origin in one environment, held by one organisation.";
-            readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
-            readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
-            readonly properties: {
-                origin: import("zod").ZodString;
-                environment: import("zod").ZodString;
-                fingerprint: import("zod").ZodString;
-                line: import("zod").ZodString;
-            };
-            readonly policies: {
-                read: () => import("@astrale-os/sdk/schema").Policy;
-            };
-        }>;
         readonly Deployment: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly abstract: true;
-            readonly description: "One immutable deployment of a release on a publisher line.";
+            readonly description: "One immutable deployment of a Service.";
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
             readonly properties: {
@@ -520,9 +378,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     readonly retiring: {
                         readonly completeRetirement: "retired";
                     };
-                    readonly retired: {
-                        readonly revive: "deploying";
-                    };
+                    readonly retired: {};
                     readonly failed: {
                         readonly retry: "deploying";
                         readonly retire: "retiring";
@@ -531,10 +387,6 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     required?: boolean;
                     description?: string;
                 }>;
-                retention: import("zod").ZodEnum<{
-                    preview: "preview";
-                    published: "published";
-                }>;
                 record: import("zod").ZodObject<{
                     format: import("zod").ZodLiteral<"astrale.deployment-record">;
                     version: import("zod").ZodLiteral<1>;
@@ -613,30 +465,12 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                 }>, {
                     readonly required: false;
                 }>;
-                lastCallAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                    readonly type: 'string';
-                    readonly 'x-astrale-value-kind': 'instant';
-                }>, {
-                    readonly required: false;
-                }>;
-                expiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                    readonly type: 'string';
-                    readonly 'x-astrale-value-kind': 'instant';
-                }>, {
-                    readonly required: false;
-                }>;
                 retiredAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
                     readonly type: 'string';
                     readonly 'x-astrale-value-kind': 'instant';
                 }>, {
                     readonly required: false;
                 }>;
-                retirement: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodEnum<{
-                    expired: "expired";
-                    withdrawn: "withdrawn";
-                }>, {
-                    readonly required: false;
-                }>;
                 operationReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
                     readonly required: false;
                 }>;
@@ -647,33 +481,13 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     readonly required: false;
                 }>;
             };
-            readonly methods: {
-                setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name: string;
-                    value: string;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        name: string;
-                    } | {
-                        kind: "rejected";
-                        reason: "secret-undeclared" | "service-unavailable";
-                        message: string;
-                        retryAfter?: string | undefined;
-                    };
-                }, "authenticated", false, true, undefined>>;
-                secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: string[];
-                }, "authenticated", false, true, undefined>>;
-            };
         }>;
         readonly CloudflareDeployment: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly description: "One Deployment uploaded as the Workers for Platforms script its label names.";
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly extends: readonly [import("@astrale-os/sdk/schema").AuthoredNodeClass<{
                 readonly abstract: true;
-                readonly description: "One immutable deployment of a release on a publisher line.";
+                readonly description: "One immutable deployment of a Service.";
                 readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
                 readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
                 readonly properties: {
@@ -690,9 +504,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         readonly retiring: {
                             readonly completeRetirement: "retired";
                         };
-                        readonly retired: {
-                            readonly revive: "deploying";
-                        };
+                        readonly retired: {};
                         readonly failed: {
                             readonly retry: "deploying";
                             readonly retire: "retiring";
@@ -701,10 +513,6 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         required?: boolean;
                         description?: string;
                     }>;
-                    retention: import("zod").ZodEnum<{
-                        preview: "preview";
-                        published: "published";
-                    }>;
                     record: import("zod").ZodObject<{
                         format: import("zod").ZodLiteral<"astrale.deployment-record">;
                         version: import("zod").ZodLiteral<1>;
@@ -783,30 +591,12 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     }>, {
                         readonly required: false;
                     }>;
-                    lastCallAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                        readonly type: 'string';
-                        readonly 'x-astrale-value-kind': 'instant';
-                    }>, {
-                        readonly required: false;
-                    }>;
-                    expiresAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
-                        readonly type: 'string';
-                        readonly 'x-astrale-value-kind': 'instant';
-                    }>, {
-                        readonly required: false;
-                    }>;
                     retiredAt: import("@astrale-os/sdk/schema").AuthoredProperty<Readonly<{
                         readonly type: 'string';
                         readonly 'x-astrale-value-kind': 'instant';
                     }>, {
                         readonly required: false;
                     }>;
-                    retirement: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodEnum<{
-                        expired: "expired";
-                        withdrawn: "withdrawn";
-                    }>, {
-                        readonly required: false;
-                    }>;
                     operationReceipt: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodString, {
                         readonly required: false;
                     }>;
@@ -817,313 +607,20 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         readonly required: false;
                     }>;
                 };
-                readonly methods: {
-                    setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                        name: string;
-                        value: string;
-                    }, {
-                        readonly mode: 'value';
-                        readonly value: {
-                            name: string;
-                        } | {
-                            kind: "rejected";
-                            reason: "secret-undeclared" | "service-unavailable";
-                            message: string;
-                            retryAfter?: string | undefined;
-                        };
-                    }, "authenticated", false, true, undefined>>;
-                    secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                        readonly mode: 'value';
-                        readonly value: string[];
-                    }, "authenticated", false, true, undefined>>;
-                };
             }>];
             readonly methods: {
-                deploy: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    format: "astrale.services.deployment-request";
-                    version: 1;
-                    organization?: string | undefined;
-                    origin: string;
-                    environment: string;
-                    addressing: "opaque" | "readable";
-                    label: string;
-                    buildDigest: string;
-                    configuration: {
-                        format: "astrale.deployment.configuration";
-                        version: 1;
-                        vars: Record<string, string>;
-                        settings: {
-                            maximumRequestBytes: number;
-                            invocationTimeoutMs: number;
-                            tokenExchange: false | {
-                                maximumLifetimeSeconds: number;
-                            };
-                            durableOptions?: {
-                                retentionMs?: number | undefined;
-                                retry?: {
-                                    initialIntervalMs?: number | undefined;
-                                    maxAttempts?: number | undefined;
-                                    maxIntervalMs?: number | undefined;
-                                } | undefined;
-                                stepTimeoutMs?: number | undefined;
-                            } | undefined;
-                        };
-                        runtime: {
-                            compatibilityDate: string;
-                            compatibilityFlags: string[];
-                        };
-                        bindings: {
-                            services: {
-                                name: string;
-                                service: string;
-                            }[];
-                            dispatchNamespaces: {
-                                name: string;
-                                namespace: string;
-                            }[];
-                            secrets: string[];
-                        };
-                        router: false | {
-                            service: string;
-                            hostSuffix: string;
-                            minLabels: number;
-                        };
-                    };
-                    record: {
-                        releaseDigest: string;
-                        schemaRevision: string;
-                        schemaBundle: string;
-                        commit: {
-                            sha: string;
-                            dirty: boolean;
-                            base?: {
-                                version: string;
-                                distance: number;
-                            } | undefined;
-                        } | null;
-                    };
-                    bundle: {
-                        entrypoint: string;
-                        modules: ({
-                            name: string;
-                            kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                            content: {
-                                encoding: "gzip" | "identity";
-                                decodedSize: number;
-                                contentBase64: string;
-                            } | {
-                                encoding: "gzip" | "identity";
-                                decodedSize: number;
-                                contentBase64Chunks: string[];
-                            };
-                        } | {
-                            contentBase64: string;
-                            name: string;
-                            kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                        } | {
-                            contentBase64Chunks: string[];
-                            name: string;
-                            kind?: "data" | "esm" | "text" | "wasm" | undefined;
-                        })[];
-                        assets?: {
-                            files: ({
-                                path: string;
-                                contentType?: string | undefined;
-                                content: {
-                                    encoding: "gzip" | "identity";
-                                    decodedSize: number;
-                                    contentBase64: string;
-                                } | {
-                                    encoding: "gzip" | "identity";
-                                    decodedSize: number;
-                                    contentBase64Chunks: string[];
-                                };
-                            } | {
-                                contentBase64: string;
-                                path: string;
-                                contentType?: string | undefined;
-                            } | {
-                                contentBase64Chunks: string[];
-                                path: string;
-                                contentType?: string | undefined;
-                            })[];
-                            notFound?: "404-page" | "none" | "single-page-application" | undefined;
-                            runWorkerFirst?: boolean | undefined;
-                            htmlHandling?: "none" | undefined;
-                        } | undefined;
-                    };
-                    secrets: Record<string, string>;
-                    readiness?: {
-                        paths: string[];
-                    } | undefined;
-                }, {
+                retire: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: {
                         kind: "rejected";
-                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "line-owned-elsewhere" | "service-unavailable";
+                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "service-owned-elsewhere" | "service-unavailable";
                         message: string;
                         retryAfter?: string | undefined;
                     } | {
-                        kind: "deployed";
-                        state: "created" | "reused";
-                        secrets: {
-                            state: "bound" | "unchanged" | "updated";
-                        };
-                        deployment: {
-                            id: string;
-                            url: string;
-                            label: string;
-                            line: string;
-                            owner: string;
-                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
-                            retention: "preview" | "published";
-                            createdAt: string;
-                            lastCallAt?: string | undefined;
-                            expiresAt?: string | undefined;
-                            retiredAt?: string | undefined;
-                            retirement?: "expired" | "withdrawn" | undefined;
-                            signingKeyId: string;
-                            record: {
-                                format: "astrale.deployment-record";
-                                version: 1;
-                                origin: string;
-                                environment: string;
-                                releaseDigest: string;
-                                buildDigest: string;
-                                schemaRevision: string;
-                                configuration: string;
-                                providerScript: string;
-                                commit: {
-                                    sha: string;
-                                    dirty: boolean;
-                                    base?: {
-                                        version: string;
-                                        distance: number;
-                                    } | undefined;
-                                } | null;
-                            };
-                        };
-                    };
-                }, "authenticated", true, false, undefined>>;
-                hosting: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        routingDomain: string;
-                        addressing: "opaque" | "readable";
-                    };
-                }, "authenticated", true, false, undefined>>;
-                list: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    origin?: string | undefined;
-                    environment?: string | undefined;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        deployments: ({
-                            id: string;
-                            url: string;
-                            label: string;
-                            line: string;
-                            owner: string;
-                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
-                            retention: "preview" | "published";
-                            createdAt: string;
-                            lastCallAt?: string | undefined;
-                            expiresAt?: string | undefined;
-                            retiredAt?: string | undefined;
-                            retirement?: "expired" | "withdrawn" | undefined;
-                            signingKeyId: string;
-                            record: {
-                                format: "astrale.deployment-record";
-                                version: 1;
-                                origin: string;
-                                environment: string;
-                                releaseDigest: string;
-                                buildDigest: string;
-                                schemaRevision: string;
-                                configuration: string;
-                                providerScript: string;
-                                commit: {
-                                    sha: string;
-                                    dirty: boolean;
-                                    base?: {
-                                        version: string;
-                                        distance: number;
-                                    } | undefined;
-                                } | null;
-                            };
-                        } | {
-                            id: string;
-                            url: string;
-                            label: string;
-                            line: string;
-                            owner: string;
-                            state: "active" | "deploying" | "failed" | "retired" | "retiring";
-                            retention: "preview" | "published";
-                            createdAt: string;
-                            lastCallAt?: string | undefined;
-                            expiresAt?: string | undefined;
-                            retiredAt?: string | undefined;
-                            retirement?: "expired" | "withdrawn" | undefined;
-                            signingKeyId: string;
-                            record: unknown;
-                        })[];
-                    };
-                }, "authenticated", true, false, undefined>>;
-                setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    name: string;
-                    value: string;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        name: string;
-                    } | {
-                        kind: "rejected";
-                        reason: "secret-undeclared" | "service-unavailable";
-                        message: string;
-                        retryAfter?: string | undefined;
-                    };
-                }, "authenticated", false, false, undefined>>;
-                secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: string[];
-                }, "authenticated", false, false, undefined>>;
-                lastCalls: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    labels: string[];
-                }, {
-                    readonly mode: 'value';
-                    readonly value: Record<string, string | null>;
-                }, "authenticated", true, false, undefined>>;
-                expirePreviews: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    limit?: number | undefined;
-                    apply?: boolean | undefined;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        planned: string[];
-                        retired: string[];
-                        pending: string[];
-                    };
-                }, "authenticated", true, false, undefined>>;
-                retain: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-                    label: string;
-                }, {
-                    readonly mode: 'value';
-                    readonly value: {
-                        retention: "published";
-                    };
-                }, "authenticated", true, false, undefined>>;
-                retire: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-                    readonly mode: 'value';
-                    readonly value: {
                         kind: "retired";
                     } | {
                         kind: "retiring";
                         retryAfterMs: number;
-                    } | {
-                        kind: "rejected";
-                        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "line-owned-elsewhere" | "service-unavailable";
-                        message: string;
-                        retryAfter?: string | undefined;
                     };
                 }, "authenticated", false, false, undefined>>;
             };
@@ -1131,34 +628,34 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                 read: () => import("@astrale-os/sdk/schema").Policy;
             };
         }>;
-        readonly line_owned_by: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+        readonly deployment_of: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
             readonly depth: 0;
             readonly abstract: false;
             readonly extends: readonly [];
             readonly properties: never;
             readonly source: {
-                readonly as: "line";
-                readonly outgoing: "0..1";
+                readonly as: "deployment";
+                readonly outgoing: "1";
             };
             readonly target: {
-                readonly as: "owner";
+                readonly as: "service";
                 readonly incoming: "0..*";
             };
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
-        readonly deployment_on_line: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+        readonly current_deployment: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
             readonly depth: 0;
             readonly abstract: false;
             readonly extends: readonly [];
             readonly properties: never;
             readonly source: {
-                readonly as: "deployment";
-                readonly outgoing: "1";
+                readonly as: "service";
+                readonly outgoing: "0..1";
             };
             readonly target: {
-                readonly as: "line";
-                readonly incoming: "0..*";
+                readonly as: "deployment";
+                readonly incoming: "0..1";
             };
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
@@ -1167,15 +664,12 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
     readonly policies: {
         readonly OwnService: import("@astrale-os/sdk/schema").Policy;
         readonly TraverseOwnedService: import("@astrale-os/sdk/schema").Policy;
-        readonly OwnLine: import("@astrale-os/sdk/schema").Policy;
+        readonly ActAs: import("@astrale-os/sdk/schema").Policy;
         readonly OwnDeployment: import("@astrale-os/sdk/schema").Policy;
-        readonly ActForOrganization: import("@astrale-os/sdk/schema").Policy;
-        readonly TraverseOwnedLine: import("@astrale-os/sdk/schema").Policy;
-        readonly TraverseOwnedLineDeployment: import("@astrale-os/sdk/schema").Policy;
+        readonly TraverseOwnedServiceDeployment: import("@astrale-os/sdk/schema").Policy;
     };
     readonly views: {
         readonly application: import("@astrale-os/sdk/schema").View;
-        readonly service: import("@astrale-os/sdk/schema").View;
     };
 }, {
     readonly kernel: "kernel.astrale.ai";