@astrale-domains/services 0.4.9 → 0.5.0

package/dist/schema/modules/deployment/classes/deployment.js

@@ -1,27 +1,24 @@
 import { classIcon, K, nodeClass, property, schema as valueSchema, stateProperty, } from '@astrale-os/sdk/schema';
 import { Rocket } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
-import { listDeploymentSecretNames } from '../functions/list-deployment-secret-names.js';
-import { setDeploymentSecret } from '../functions/set-deployment-secret.js';
 import { deploymentLifecycle } from '../states/index.js';
-import { deploymentRecord, deploymentRetention, deploymentRetirement, deploymentSecretDigests, frozenConfiguration, } from '../types/index.js';
+import { deploymentRecord, deploymentSecretDigests, frozenConfiguration } from '../types/index.js';
 /**
- * One immutable deployment of a release: one build in one environment with its frozen
- * configuration, served by one script at its own URL. It never changes code; a new release is a
- * new deployment on the same line. Its secrets alone rotate in place, on this deployment only,
- * and only under the names its configuration declares: a name added or removed is a new release.
+ * One immutable deployment of one Service: one build in one environment with its frozen
+ * configuration, served by one script at its own URL. It never changes code; a new release is a new
+ * deployment of the same Service. Only its secrets rotate in place, under the names its
+ * configuration declares.
  */
 export const Deployment = nodeClass({
     abstract: true,
-    description: 'One immutable deployment of a release on a publisher line.',
+    description: 'One immutable deployment of a Service.',
     icon: classIcon.lucide(Rocket),
     extends: [K.classes.Timestamped],
     properties: {
-        /** `<line>-<content16>`, the DNS label and provider script name of this deployment. */
+        /** `<service name>-<content16>`, the DNS label and provider script name of this deployment. */
         label: z.string().min(33).max(57),
         url: z.string().min(1).max(2_048),
         state: stateProperty(deploymentLifecycle),
-        retention: deploymentRetention,
         record: deploymentRecord,
         /** The configuration frozen into this deployment; its digest is `record.configuration`. */
         configuration: frozenConfiguration,
@@ -33,24 +30,13 @@ export const Deployment = nodeClass({
          */
         scriptEtag: property(z.string().min(1).max(128), { required: false }),
         signingKeyId: property(z.string().min(1).max(128), { required: false }),
-        /**
-         * The last time this deployment became active: its creation, or its revival after it expired.
-         * A preview's 30 days run from it or from its last call, whichever is later.
-         */
         activatedAt: property(valueSchema.values.instant, { required: false }),
-        lastCallAt: property(valueSchema.values.instant, { required: false }),
-        expiresAt: property(valueSchema.values.instant, { required: false }),
         retiredAt: property(valueSchema.values.instant, { required: false }),
-        retirement: property(deploymentRetirement, { required: false }),
         /**
-         * The graph lease of the provider operation in flight on this deployment: its creation, or an
-         * in-place rewrite of its secrets once it serves.
+         * The graph lease of the provider operation in flight on this deployment: its creation, an
+         * in-place rewrite of its secrets, or its retirement.
          */
         operationReceipt: property(z.string().min(1).max(128), { required: false }),
         operationExpiresAt: property(valueSchema.values.instant, { required: false }),
     },
-    methods: {
-        setSecret: setDeploymentSecret,
-        secrets: listDeploymentSecretNames,
-    },
 });

package/dist/schema/modules/deployment/classes/index.d.ts

@@ -1,5 +1,4 @@
 export { CloudflareDeployment } from './cloudflare-deployment.js';
+export { current_deployment } from './current-deployment.js';
 export { Deployment } from './deployment.js';
-export { DeploymentLine } from './deployment-line.js';
-export { deployment_on_line } from './deployment-on-line.js';
-export { line_owned_by } from './line-owned-by.js';
+export { deployment_of } from './deployment-of.js';

package/dist/schema/modules/deployment/classes/index.js

@@ -1,5 +1,4 @@
 export { CloudflareDeployment } from './cloudflare-deployment.js';
+export { current_deployment } from './current-deployment.js';
 export { Deployment } from './deployment.js';
-export { DeploymentLine } from './deployment-line.js';
-export { deployment_on_line } from './deployment-on-line.js';
-export { line_owned_by } from './line-owned-by.js';
+export { deployment_of } from './deployment-of.js';

package/dist/schema/modules/deployment/errors/deployment-not-found.d.ts

@@ -1,10 +1,7 @@
 import { z } from 'zod';
-/**
- * Asked about a deployment the caller does not hold: a deployment of a line held by another
- * organisation is invisible to the caller, as its read Policy keeps it.
- */
+/** Asked about a deployment of a Service the caller does not own: it is invisible to the caller. */
 export declare const deploymentNotFound: Readonly<{
     readonly family: "NOT_FOUND";
-    readonly message: "No deployment of a line the caller holds has this id.";
+    readonly message: "No deployment of a Service the caller owns has this id.";
     readonly details: z.ZodObject<{}, z.core.$strict>;
 }>;

package/dist/schema/modules/deployment/errors/deployment-not-found.js

@@ -1,11 +1,8 @@
 import { error } from '@astrale-os/sdk/schema/errors';
 import { z } from 'zod';
-/**
- * Asked about a deployment the caller does not hold: a deployment of a line held by another
- * organisation is invisible to the caller, as its read Policy keeps it.
- */
+/** Asked about a deployment of a Service the caller does not own: it is invisible to the caller. */
 export const deploymentNotFound = error({
     family: 'NOT_FOUND',
-    message: 'No deployment of a line the caller holds has this id.',
+    message: 'No deployment of a Service the caller owns has this id.',
     details: z.strictObject({}),
 });

package/dist/schema/modules/deployment/errors/index.d.ts

@@ -1,4 +1,2 @@
 export { deploymentHostingUnavailable } from './deployment-hosting-unavailable.js';
-export { deploymentLabelNotFound } from './deployment-label-not-found.js';
 export { deploymentNotFound } from './deployment-not-found.js';
-export { deploymentRegistryOnly } from './deployment-registry-only.js';

package/dist/schema/modules/deployment/errors/index.js

@@ -1,4 +1,2 @@
 export { deploymentHostingUnavailable } from './deployment-hosting-unavailable.js';
-export { deploymentLabelNotFound } from './deployment-label-not-found.js';
 export { deploymentNotFound } from './deployment-not-found.js';
-export { deploymentRegistryOnly } from './deployment-registry-only.js';

package/dist/schema/modules/deployment/functions/index.d.ts

@@ -1,11 +1 @@
-export { deployCloudflareDeployment } from './deploy-cloudflare-deployment.js';
-export { describeDeploymentHosting } from './describe-deployment-hosting.js';
-export { expireDeploymentPreviews } from './expire-deployment-previews.js';
-export { listCloudflareDeployments } from './list-cloudflare-deployments.js';
-export { listCloudflareDeploymentSecretNames } from './list-cloudflare-deployment-secret-names.js';
-export { listDeploymentSecretNames } from './list-deployment-secret-names.js';
-export { readDeploymentLastCalls } from './read-deployment-last-calls.js';
-export { retainDeployment } from './retain-deployment.js';
 export { retireDeployment } from './retire-deployment.js';
-export { setCloudflareDeploymentSecret } from './set-cloudflare-deployment-secret.js';
-export { setDeploymentSecret } from './set-deployment-secret.js';

package/dist/schema/modules/deployment/functions/index.js

@@ -1,11 +1 @@
-export { deployCloudflareDeployment } from './deploy-cloudflare-deployment.js';
-export { describeDeploymentHosting } from './describe-deployment-hosting.js';
-export { expireDeploymentPreviews } from './expire-deployment-previews.js';
-export { listCloudflareDeployments } from './list-cloudflare-deployments.js';
-export { listCloudflareDeploymentSecretNames } from './list-cloudflare-deployment-secret-names.js';
-export { listDeploymentSecretNames } from './list-deployment-secret-names.js';
-export { readDeploymentLastCalls } from './read-deployment-last-calls.js';
-export { retainDeployment } from './retain-deployment.js';
 export { retireDeployment } from './retire-deployment.js';
-export { setCloudflareDeploymentSecret } from './set-cloudflare-deployment-secret.js';
-export { setDeploymentSecret } from './set-deployment-secret.js';

package/dist/schema/modules/deployment/functions/retire-deployment.d.ts

@@ -1,11 +1,12 @@
 /**
- * Withdraw one deployment for good: the emergency stop of its line holder. Its URL then answers
- * `DEPLOYMENT_RETIRED`, its script and key are deleted, and no redeploy serves it again.
+ * Withdraw one deployment for good: its URL then answers `DEPLOYMENT_RETIRED`, its script and key
+ * are deleted, and no redeploy serves it again. The current deployment of a Service is never
+ * retired alone: promote another one first, or delete the Service.
  *
- * Only the holder of the deployment's line, or an Identity acting for it, withdraws it: the
- * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment, as
- * `setSecret` does. An `authorized` Method would also require the caller's principal to hold
- * `can_use` on this Function, which no publisher identity holds on the Admin instance.
+ * Only the owner of the deployment's Service, or an Identity acting as it, withdraws it: the
+ * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment. An
+ * `authorized` Method would also require the caller's principal to hold `can_use` on this
+ * Function, which no deployer identity holds on the Admin instance.
  */
 export declare const retireDeployment: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
@@ -16,7 +17,7 @@ export declare const retireDeployment: import("@astrale-os/sdk/schema").Method<i
         retryAfterMs: number;
     } | {
         kind: "rejected";
-        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "line-owned-elsewhere" | "service-unavailable";
+        reason: "address-mismatch" | "build-mismatch" | "deployment-conflict" | "deployment-retired" | "hosting-unavailable" | "invalid-deployment" | "service-owned-elsewhere" | "service-unavailable";
         message: string;
         retryAfter?: string | undefined;
     };

package/dist/schema/modules/deployment/functions/retire-deployment.js

@@ -1,16 +1,17 @@
 import { method } from '@astrale-os/sdk/schema';
 import { retireDeploymentInput, retireDeploymentOutput } from '../types/deployment-retire.js';
 /**
- * Withdraw one deployment for good: the emergency stop of its line holder. Its URL then answers
- * `DEPLOYMENT_RETIRED`, its script and key are deleted, and no redeploy serves it again.
+ * Withdraw one deployment for good: its URL then answers `DEPLOYMENT_RETIRED`, its script and key
+ * are deleted, and no redeploy serves it again. The current deployment of a Service is never
+ * retired alone: promote another one first, or delete the Service.
  *
- * Only the holder of the deployment's line, or an Identity acting for it, withdraws it: the
- * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment, as
- * `setSecret` does. An `authorized` Method would also require the caller's principal to hold
- * `can_use` on this Function, which no publisher identity holds on the Admin instance.
+ * Only the owner of the deployment's Service, or an Identity acting as it, withdraws it: the
+ * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment. An
+ * `authorized` Method would also require the caller's principal to hold `can_use` on this
+ * Function, which no deployer identity holds on the Admin instance.
  */
 export const retireDeployment = method({
-    description: 'Withdraw this deployment for good: an emergency stop.',
+    description: 'Withdraw this deployment for good.',
     auth: 'authenticated',
     input: retireDeploymentInput,
     output: retireDeploymentOutput,

package/dist/schema/modules/deployment/index.d.ts

@@ -1,8 +1,8 @@
-export { CloudflareDeployment, Deployment, DeploymentLine, deployment_on_line, line_owned_by, } from './classes/index.js';
-export { deploymentHostingUnavailable, deploymentLabelNotFound, deploymentNotFound, deploymentRegistryOnly, } from './errors/index.js';
-export { deployCloudflareDeployment, describeDeploymentHosting, expireDeploymentPreviews, listCloudflareDeploymentSecretNames, listCloudflareDeployments, listDeploymentSecretNames, readDeploymentLastCalls, retainDeployment, retireDeployment, setCloudflareDeploymentSecret, setDeploymentSecret, } from './functions/index.js';
-export { ActForOrganization, OwnDeployment, OwnLine, TraverseOwnedLine, TraverseOwnedLineDeployment, } from './policies/index.js';
+export { artifactModule, assetBundle, assetFile, deploymentCommit, deploymentHosting, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listDeploymentsInput, listDeploymentsOutput, listedDeploymentSummary, retireDeploymentInput, retireDeploymentOutput, unadmittedDeploymentSummary, } from './types/index.js';
+export type { ArtifactModule, AssetBundle, ServiceDeploymentContent, DeploymentHosting, DeploymentRecord, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, FrozenConfiguration, ListedDeploymentSummary, RetireDeploymentResult, UnadmittedDeploymentSummary, } from './types/index.js';
+export { CloudflareDeployment, Deployment, current_deployment, deployment_of, } from './classes/index.js';
+export { deploymentHostingUnavailable, deploymentNotFound } from './errors/index.js';
+export { retireDeployment } from './functions/index.js';
+export { OwnDeployment, TraverseOwnedServiceDeployment } from './policies/index.js';
 export { deploymentLifecycle } from './states/index.js';
 export type { DeploymentLifecycle, DeploymentLifecycleEvent } from './states/index.js';
-export { deploymentCommit, deploymentHosting, deploymentLabel, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentRetention, deploymentRetirement, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, expirePreviewsInput, expirePreviewsOutput, frozenConfiguration, lastCallsInput, lastCallsOutput, listDeploymentSecretNamesContract, listedDeploymentSummary, listDeploymentsInput, listDeploymentsOutput, MAXIMUM_LAST_CALL_LABELS, MAXIMUM_PREVIEW_EXPIRY_WRITES, retainInput, retainOutput, retireDeploymentInput, retireDeploymentOutput, setDeploymentSecretContract, unadmittedDeploymentSummary, } from './types/index.js';
-export type { DeploymentHosting, DeploymentRecord, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentRetention, DeploymentRetirement, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, ExpirePreviewsResult, FrozenConfiguration, ListedDeploymentSummary, RetireDeploymentResult, UnadmittedDeploymentSummary, } from './types/index.js';

package/dist/schema/modules/deployment/index.js

@@ -1,6 +1,8 @@
-export { CloudflareDeployment, Deployment, DeploymentLine, deployment_on_line, line_owned_by, } from './classes/index.js';
-export { deploymentHostingUnavailable, deploymentLabelNotFound, deploymentNotFound, deploymentRegistryOnly, } from './errors/index.js';
-export { deployCloudflareDeployment, describeDeploymentHosting, expireDeploymentPreviews, listCloudflareDeploymentSecretNames, listCloudflareDeployments, listDeploymentSecretNames, readDeploymentLastCalls, retainDeployment, retireDeployment, setCloudflareDeploymentSecret, setDeploymentSecret, } from './functions/index.js';
-export { ActForOrganization, OwnDeployment, OwnLine, TraverseOwnedLine, TraverseOwnedLineDeployment, } from './policies/index.js';
+// Types first: the service module's Methods read them while this module's classes, which refer
+// to the Service class, are still evaluating.
+export { artifactModule, assetBundle, assetFile, deploymentCommit, deploymentHosting, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listDeploymentsInput, listDeploymentsOutput, listedDeploymentSummary, retireDeploymentInput, retireDeploymentOutput, unadmittedDeploymentSummary, } from './types/index.js';
+export { CloudflareDeployment, Deployment, current_deployment, deployment_of, } from './classes/index.js';
+export { deploymentHostingUnavailable, deploymentNotFound } from './errors/index.js';
+export { retireDeployment } from './functions/index.js';
+export { OwnDeployment, TraverseOwnedServiceDeployment } from './policies/index.js';
 export { deploymentLifecycle } from './states/index.js';
-export { deploymentCommit, deploymentHosting, deploymentLabel, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentRetention, deploymentRetirement, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, expirePreviewsInput, expirePreviewsOutput, frozenConfiguration, lastCallsInput, lastCallsOutput, listDeploymentSecretNamesContract, listedDeploymentSummary, listDeploymentsInput, listDeploymentsOutput, MAXIMUM_LAST_CALL_LABELS, MAXIMUM_PREVIEW_EXPIRY_WRITES, retainInput, retainOutput, retireDeploymentInput, retireDeploymentOutput, setDeploymentSecretContract, unadmittedDeploymentSummary, } from './types/index.js';

package/dist/schema/modules/deployment/policies/index.d.ts

@@ -1,5 +1,2 @@
-export { ActForOrganization } from './act-for-organization.js';
 export { OwnDeployment } from './own-deployment.js';
-export { OwnLine } from './own-line.js';
-export { TraverseOwnedLine } from './traverse-owned-line.js';
-export { TraverseOwnedLineDeployment } from './traverse-owned-line-deployment.js';
+export { TraverseOwnedServiceDeployment } from './traverse-owned-service-deployment.js';

package/dist/schema/modules/deployment/policies/index.js

@@ -1,5 +1,2 @@
-export { ActForOrganization } from './act-for-organization.js';
 export { OwnDeployment } from './own-deployment.js';
-export { OwnLine } from './own-line.js';
-export { TraverseOwnedLine } from './traverse-owned-line.js';
-export { TraverseOwnedLineDeployment } from './traverse-owned-line-deployment.js';
+export { TraverseOwnedServiceDeployment } from './traverse-owned-service-deployment.js';

package/dist/schema/modules/deployment/policies/own-deployment.d.ts

@@ -1,2 +1,2 @@
-/** A deployment belongs to whoever holds its line; it carries no owner of its own. */
+/** A deployment belongs to whoever owns its Service; it carries no owner of its own. */
 export declare const OwnDeployment: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/deployment/policies/own-deployment.js

@@ -1,12 +1,11 @@
 import { policy } from '@astrale-os/sdk/schema';
-import { DeploymentLine } from '../classes/deployment-line.js';
-import { deployment_on_line } from '../classes/deployment-on-line.js';
-import { line_owned_by } from '../classes/line-owned-by.js';
-/** A deployment belongs to whoever holds its line; it carries no owner of its own. */
+import { Service, service_owned_by } from '../../service/index.js';
+import { deployment_of } from '../classes/deployment-of.js';
+/** A deployment belongs to whoever owns its Service; it carries no owner of its own. */
 export const OwnDeployment = policy({
-    description: 'The subject holds the deployment line this Deployment was made on.',
+    description: 'The subject owns the Service this Deployment is a version of.',
     match: ({ allOf, edge, exists, object, subject }) => exists(({ node }) => {
-        const line = node(() => DeploymentLine);
-        return allOf(edge({ source: object, class: () => deployment_on_line, target: line }), edge({ source: line, class: () => line_owned_by, target: subject }));
+        const service = node(() => Service);
+        return allOf(edge({ source: object, class: () => deployment_of, target: service }), edge({ source: service, class: () => service_owned_by, target: subject }));
     }),
 });

package/dist/schema/modules/deployment/policies/traverse-owned-service-deployment.d.ts

@@ -0,0 +1,2 @@
+/** A deployment's Service relationship is visible only to the owner of that Service. */
+export declare const TraverseOwnedServiceDeployment: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/deployment/policies/traverse-owned-service-deployment.js

@@ -0,0 +1,7 @@
+import { policy } from '@astrale-os/sdk/schema';
+import { service_owned_by } from '../../service/index.js';
+/** A deployment's Service relationship is visible only to the owner of that Service. */
+export const TraverseOwnedServiceDeployment = policy({
+    description: 'The subject owns the Service at the target of this relationship.',
+    match: ({ edge, subject, target }) => edge({ source: target, class: () => service_owned_by, target: subject }),
+});

package/dist/schema/modules/deployment/states/deployment-lifecycle.d.ts

@@ -1,11 +1,10 @@
 import { type EventOf, type StateOf } from '@astrale-os/sdk/state';
 /**
- * Lifecycle of one immutable deployment. A deployment never changes code: it is created
- * `deploying`, becomes `active` once its script serves, and leaves only by retirement, in two
- * phases: `retiring` once its tombstone is written, `retired` once its script and key are deleted.
- * A failed creation can be retried on the same label, or retired, since it may have left a
- * script. An expired retirement can be revived for the same line holder and artifact; a withdrawn
- * one never.
+ * Lifecycle of one immutable deployment. It is created `deploying`, becomes `active` once its
+ * script serves, and leaves only by retirement, in two phases: `retiring` once its tombstone is
+ * written, `retired` once its script and key are deleted. A failed creation can be retried on the
+ * same label, or retired, since it may have left a script. A retired deployment is never served
+ * again.
  */
 export declare const deploymentLifecycle: import("@astrale-os/sdk/schema").StateMachine<{
     readonly deploying: {
@@ -18,9 +17,7 @@ export declare const deploymentLifecycle: import("@astrale-os/sdk/schema").State
     readonly retiring: {
         readonly completeRetirement: "retired";
     };
-    readonly retired: {
-        readonly revive: "deploying";
-    };
+    readonly retired: {};
     readonly failed: {
         readonly retry: "deploying";
         readonly retire: "retiring";

package/dist/schema/modules/deployment/states/deployment-lifecycle.js

@@ -1,11 +1,10 @@
 import { stateMachine } from '@astrale-os/sdk/state';
 /**
- * Lifecycle of one immutable deployment. A deployment never changes code: it is created
- * `deploying`, becomes `active` once its script serves, and leaves only by retirement, in two
- * phases: `retiring` once its tombstone is written, `retired` once its script and key are deleted.
- * A failed creation can be retried on the same label, or retired, since it may have left a
- * script. An expired retirement can be revived for the same line holder and artifact; a withdrawn
- * one never.
+ * Lifecycle of one immutable deployment. It is created `deploying`, becomes `active` once its
+ * script serves, and leaves only by retirement, in two phases: `retiring` once its tombstone is
+ * written, `retired` once its script and key are deleted. A failed creation can be retried on the
+ * same label, or retired, since it may have left a script. A retired deployment is never served
+ * again.
  */
 export const deploymentLifecycle = stateMachine({
     initial: 'deploying',
@@ -13,7 +12,7 @@ export const deploymentLifecycle = stateMachine({
         deploying: { activate: 'active', fail: 'failed' },
         active: { retire: 'retiring' },
         retiring: { completeRetirement: 'retired' },
-        retired: { revive: 'deploying' },
+        retired: {},
         failed: { retry: 'deploying', retire: 'retiring' },
     },
 });

package/dist/schema/modules/deployment/types/deployment-hosting.d.ts

@@ -1,18 +1,15 @@
 import { z } from 'zod';
-/** Where this Services runtime addresses deployments, and how the caller's own lines read. */
+/** Where this Services runtime addresses Services and deployments; their names are opaque. */
 export declare const deploymentHosting: z.ZodObject<{
     routingDomain: z.ZodString;
-    addressing: z.ZodEnum<{
-        opaque: "opaque";
-        readable: "readable";
-    }>;
+    addressing: z.ZodLiteral<"opaque">;
 }, z.core.$strict>;
 export declare const listDeploymentsInput: z.ZodObject<{
     origin: z.ZodOptional<z.ZodString>;
     environment: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 /**
- * The deployments of the caller's lines. A deployment whose stored record or configuration this
+ * The deployments of the caller's Services. A deployment whose stored record or configuration this
  * Services SDK no longer admits is listed from its facts with its record as stored, never dropped,
  * and never fails the listing.
  */
@@ -21,7 +18,8 @@ export declare const listDeploymentsOutput: z.ZodObject<{
         id: z.ZodString;
         url: z.ZodString;
         label: z.ZodString;
-        line: z.ZodString;
+        serviceId: z.ZodString;
+        service: z.ZodString;
         owner: z.ZodString;
         state: z.ZodEnum<{
             active: "active";
@@ -30,18 +28,9 @@ export declare const listDeploymentsOutput: z.ZodObject<{
             retired: "retired";
             retiring: "retiring";
         }>;
-        retention: z.ZodEnum<{
-            preview: "preview";
-            published: "published";
-        }>;
+        current: z.ZodBoolean;
         createdAt: z.ZodString;
-        lastCallAt: z.ZodOptional<z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodString>;
         retiredAt: z.ZodOptional<z.ZodString>;
-        retirement: z.ZodOptional<z.ZodEnum<{
-            expired: "expired";
-            withdrawn: "withdrawn";
-        }>>;
         signingKeyId: z.ZodString;
         record: z.ZodObject<{
             format: z.ZodLiteral<"astrale.deployment-record">;
@@ -66,7 +55,8 @@ export declare const listDeploymentsOutput: z.ZodObject<{
         id: z.ZodString;
         url: z.ZodString;
         label: z.ZodString;
-        line: z.ZodString;
+        serviceId: z.ZodString;
+        service: z.ZodString;
         owner: z.ZodString;
         state: z.ZodEnum<{
             active: "active";
@@ -75,18 +65,9 @@ export declare const listDeploymentsOutput: z.ZodObject<{
             retired: "retired";
             retiring: "retiring";
         }>;
-        retention: z.ZodEnum<{
-            preview: "preview";
-            published: "published";
-        }>;
+        current: z.ZodBoolean;
         createdAt: z.ZodString;
-        lastCallAt: z.ZodOptional<z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodString>;
         retiredAt: z.ZodOptional<z.ZodString>;
-        retirement: z.ZodOptional<z.ZodEnum<{
-            expired: "expired";
-            withdrawn: "withdrawn";
-        }>>;
         signingKeyId: z.ZodString;
         record: z.ZodUnknown;
     }, z.core.$strict>]>>;

package/dist/schema/modules/deployment/types/deployment-hosting.js

@@ -1,16 +1,16 @@
 import { z } from 'zod';
 import { listedDeploymentSummary } from './deployment-summary.js';
-/** Where this Services runtime addresses deployments, and how the caller's own lines read. */
+/** Where this Services runtime addresses Services and deployments; their names are opaque. */
 export const deploymentHosting = z.strictObject({
     routingDomain: z.string().min(1).max(253),
-    addressing: z.enum(['readable', 'opaque']),
+    addressing: z.literal('opaque'),
 });
 export const listDeploymentsInput = z.strictObject({
     origin: z.string().min(1).max(253).optional(),
     environment: z.string().min(1).max(63).optional(),
 });
 /**
- * The deployments of the caller's lines. A deployment whose stored record or configuration this
+ * The deployments of the caller's Services. A deployment whose stored record or configuration this
  * Services SDK no longer admits is listed from its facts with its record as stored, never dropped,
  * and never fails the listing.
  */

package/dist/schema/modules/deployment/types/deployment-request.d.ts

@@ -1,21 +1,18 @@
 import { z } from 'zod';
 /**
- * `DeploymentRequestV1`: one release to host on the line of its origin and environment. Services
- * recomputes the build digest from the uploaded bytes and the label from the line, the build and
- * the configuration; the request states both so a deployer that computed another address is
- * refused rather than served elsewhere. The secrets are the environment's current values, bound to
- * the new deployment only.
+ * `DeploymentRequestV1`: one release to host as a deployment of the Service of its origin and
+ * environment. Services recomputes the build digest from the uploaded bytes and the label from the
+ * Service name, the build and the configuration; the request states both so a deployer that
+ * computed another address is refused rather than served elsewhere. The secrets are the
+ * environment's current values, bound to the new deployment only.
  */
 export declare const deploymentRequest: z.ZodObject<{
     format: z.ZodLiteral<"astrale.services.deployment-request">;
     version: z.ZodLiteral<1>;
-    organization: z.ZodOptional<z.ZodString>;
+    owner: z.ZodOptional<z.ZodString>;
     origin: z.ZodString;
     environment: z.ZodString;
-    addressing: z.ZodEnum<{
-        opaque: "opaque";
-        readable: "readable";
-    }>;
+    addressing: z.ZodLiteral<"opaque">;
     label: z.ZodString;
     buildDigest: z.ZodString;
     configuration: z.ZodObject<{
@@ -74,7 +71,7 @@ export declare const deploymentRequest: z.ZodObject<{
     }, z.core.$strict>;
     bundle: z.ZodObject<{
         entrypoint: z.ZodString;
-        modules: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        modules: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
                 data: "data";
@@ -97,27 +94,9 @@ export declare const deploymentRequest: z.ZodObject<{
                 decodedSize: z.ZodNumber;
                 contentBase64Chunks: z.ZodArray<z.ZodString>;
             }, z.core.$strict>]>;
-        }, z.core.$strict>, z.ZodObject<{
-            contentBase64: z.ZodString;
-            name: z.ZodString;
-            kind: z.ZodOptional<z.ZodEnum<{
-                data: "data";
-                esm: "esm";
-                text: "text";
-                wasm: "wasm";
-            }>>;
-        }, z.core.$strict>, z.ZodObject<{
-            contentBase64Chunks: z.ZodArray<z.ZodString>;
-            name: z.ZodString;
-            kind: z.ZodOptional<z.ZodEnum<{
-                data: "data";
-                esm: "esm";
-                text: "text";
-                wasm: "wasm";
-            }>>;
-        }, z.core.$strict>]>>;
+        }, z.core.$strict>>;
         assets: z.ZodOptional<z.ZodObject<{
-            files: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            files: z.ZodArray<z.ZodObject<{
                 path: z.ZodString;
                 contentType: z.ZodOptional<z.ZodString>;
                 content: z.ZodUnion<readonly [z.ZodObject<{
@@ -135,15 +114,7 @@ export declare const deploymentRequest: z.ZodObject<{
                     decodedSize: z.ZodNumber;
                     contentBase64Chunks: z.ZodArray<z.ZodString>;
                 }, z.core.$strict>]>;
-            }, z.core.$strict>, z.ZodObject<{
-                contentBase64: z.ZodString;
-                path: z.ZodString;
-                contentType: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>, z.ZodObject<{
-                contentBase64Chunks: z.ZodArray<z.ZodString>;
-                path: z.ZodString;
-                contentType: z.ZodOptional<z.ZodString>;
-            }, z.core.$strict>]>>;
+            }, z.core.$strict>>;
             notFound: z.ZodOptional<z.ZodEnum<{
                 "404-page": "404-page";
                 none: "none";
@@ -154,6 +125,7 @@ export declare const deploymentRequest: z.ZodObject<{
         }, z.core.$strict>>;
     }, z.core.$strict>;
     secrets: z.ZodRecord<z.ZodString, z.ZodString>;
+    promote: z.ZodOptional<z.ZodBoolean>;
     readiness: z.ZodOptional<z.ZodObject<{
         paths: z.ZodArray<z.ZodString>;
     }, z.core.$strict>>;

package/dist/schema/modules/deployment/types/deployment-request.js

@@ -1,24 +1,30 @@
 import { fullMatch } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { artifactModule, assetBundle } from '../../service/index.js';
 import { deploymentCommit } from './deployment-record.js';
 import { frozenConfiguration } from './frozen-configuration.js';
+import { artifactModule } from './service-deployment-artifact-module.js';
+import { assetBundle } from './service-deployment-assets.js';
 const digest = z.string().check(fullMatch('sha256:[0-9a-f]{64}'));
 /**
- * `DeploymentRequestV1`: one release to host on the line of its origin and environment. Services
- * recomputes the build digest from the uploaded bytes and the label from the line, the build and
- * the configuration; the request states both so a deployer that computed another address is
- * refused rather than served elsewhere. The secrets are the environment's current values, bound to
- * the new deployment only.
+ * `DeploymentRequestV1`: one release to host as a deployment of the Service of its origin and
+ * environment. Services recomputes the build digest from the uploaded bytes and the label from the
+ * Service name, the build and the configuration; the request states both so a deployer that
+ * computed another address is refused rather than served elsewhere. The secrets are the
+ * environment's current values, bound to the new deployment only.
  */
 export const deploymentRequest = z.strictObject({
     format: z.literal('astrale.services.deployment-request'),
     version: z.literal(1),
-    /** The Identity of the Admin instance the deploy acts for; the exact caller when absent. */
-    organization: z.string().min(1).max(256).optional(),
+    /**
+     * The Identity that owns the Service when this deploy creates it: the caller, or an Identity the
+     * caller acts as through `extends_with`. The exact caller when absent; ignored for an existing
+     * Service, which keeps its owner.
+     */
+    owner: z.string().min(1).max(256).optional(),
     origin: z.string().min(1).max(253),
     environment: z.string().min(1).max(63),
-    addressing: z.enum(['readable', 'opaque']),
+    /** Services are named by their fingerprint alone. */
+    addressing: z.literal('opaque'),
     label: z.string().min(1).max(63),
     buildDigest: digest,
     configuration: frozenConfiguration,
@@ -34,6 +40,8 @@ export const deploymentRequest = z.strictObject({
         assets: assetBundle.optional(),
     }),
     secrets: z.record(z.string().min(1).max(128), z.string().max(64 * 1024)),
+    /** Make the deployment the one the Service serves once it is active; `true` when absent. */
+    promote: z.boolean().optional(),
     readiness: z
         .strictObject({ paths: z.array(z.string().min(1).max(1_024)).min(1).max(8) })
         .optional(),