@astrale-domains/services 0.4.9 → 0.5.1

package/dist/schema/schema.js

@@ -1,29 +1,25 @@
 import { KernelSchema, defineSchema, view } from '@astrale-os/sdk/schema';
-import { ActForOrganization, CloudflareDeployment, Deployment, DeploymentLine, OwnDeployment, OwnLine, TraverseOwnedLine, TraverseOwnedLineDeployment, deployment_on_line, line_owned_by, } from './modules/deployment/index.js';
-import { CloudflareWorker, OwnService, Service, TraverseOwnedService, service_owned_by, } from './modules/service/index.js';
+import { CloudflareDeployment, Deployment, OwnDeployment, TraverseOwnedServiceDeployment, current_deployment, deployment_of, } from './modules/deployment/index.js';
+import { ActAs, CloudflareService, OwnService, Service, TraverseOwnedService, service_owned_by, } from './modules/service/index.js';
 const origin = 'services.astrale.ai';
 const classes = {
     Service,
-    CloudflareWorker,
+    CloudflareService,
     service_owned_by,
-    DeploymentLine,
     Deployment,
     CloudflareDeployment,
-    line_owned_by,
-    deployment_on_line,
+    deployment_of,
+    current_deployment,
 };
 const policies = {
     OwnService,
     TraverseOwnedService,
-    OwnLine,
+    ActAs,
     OwnDeployment,
-    ActForOrganization,
-    TraverseOwnedLine,
-    TraverseOwnedLineDeployment,
+    TraverseOwnedServiceDeployment,
 };
 const views = {
     application: view({}),
-    service: view({ target: CloudflareWorker }),
 };
 export const schema = defineSchema(origin, {
     dependencies: { kernel: KernelSchema },

package/package.json

@@ -1,14 +1,11 @@
 {
   "name": "@astrale-domains/services",
-  "version": "0.4.9",
+  "version": "0.5.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/astrale-os/domains.git",
     "directory": "services"
   },
-  "bin": {
-    "create-astrale-service": "./dist/scaffold/create-service.mjs"
-  },
   "files": [
     "dist"
   ],
@@ -75,23 +72,19 @@
     "build": "astrale-domain build",
     "lint": "astrale-domain lint",
     "lint:fix": "astrale-domain lint --fix",
-    "package": "astrale-domain package && node tooling/package-scaffolder.mjs",
+    "package": "astrale-domain package",
     "provider:bootstrap": "bun providers/cloudflare/operator/provision/bootstrap.ts",
     "provider:deployment-audit": "bun providers/cloudflare/operator/maintenance/deployment-audit.ts",
     "provider:doctor": "bun providers/cloudflare/operator/maintenance/doctor.ts",
-    "provider:orphan-audit": "bun providers/cloudflare/operator/maintenance/orphan-audit.ts",
     "provider:platform-bootstrap": "bun providers/cloudflare/operator/platform-namespace/bootstrap.ts",
     "provider:platform-expiry": "bun scripts/platform-namespace/expiry.ts",
     "provider:platform-retire": "bun scripts/platform-namespace/retire.ts",
     "provider:platform-secret": "bun providers/cloudflare/operator/platform-namespace/secret.ts",
-    "provider:reclaim-service": "bun providers/cloudflare/operator/maintenance/reclaim-service.ts",
     "provider:route-wildcard": "bun providers/cloudflare/operator/routing/wildcard.ts",
-    "provider:route-tenant": "bun providers/cloudflare/operator/routing/tenant.ts",
     "typecheck": "tsc --noEmit && tsc --project providers/cloudflare/operator/dispatch/tsconfig.json",
     "test": "vitest run --config vitest.config.ts && pnpm run accessibility:check",
     "accessibility:check": "oxlint ui views frontend/src --jsx-a11y-plugin --react-plugin --deny-warnings",
     "frontend:build": "vite build",
-    "test:remote": "node --test tests/remote/*.test.mjs",
     "test:kernel": "vitest run --config vitest.config.ts tests/kernel"
   }
 }

package/dist/scaffold/create-service.mjs

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-import { cp, mkdir, readFile, readdir, rename, writeFile } from 'node:fs/promises'
-import { basename, resolve } from 'node:path'
-
-const [directory, ...extra] = process.argv.slice(2)
-if (directory === '--help' || directory === '-h') {
-  console.log(
-    'Usage: create-astrale-service <new-directory>\nCreates local source only. Does not install dependencies, register identities or deploy.',
-  )
-} else {
-  try {
-    if (!directory || directory.startsWith('-') || extra.length) {
-      throw new Error('Usage: create-astrale-service <new-directory>')
-    }
-    const destination = resolve(directory)
-    const name = basename(destination)
-    if (!/^[a-z][a-z0-9-]{0,62}$/.test(name)) {
-      throw new Error(
-        'Use a lowercase project name beginning with a letter (maximum 63 characters).',
-      )
-    }
-    const owner = JSON.parse(await readFile(new URL('../../package.json', import.meta.url), 'utf8'))
-    // Exclusive creation preserves existing projects and refuses symlink targets.
-    await mkdir(destination)
-    const template = new URL('./template/', import.meta.url)
-    for (const entry of await readdir(template)) {
-      await cp(new URL(entry, template), resolve(destination, entry), {
-        recursive: true,
-        force: false,
-        errorOnExist: true,
-      })
-    }
-    await rename(resolve(destination, 'gitignore'), resolve(destination, '.gitignore'))
-    await writeFile(
-      resolve(destination, 'package.json'),
-      JSON.stringify(
-        {
-          name,
-          version: '0.0.0',
-          private: true,
-          type: 'module',
-          scripts: { build: 'node scripts/build.mjs', deploy: 'node scripts/deploy.mjs' },
-          dependencies: {
-            '@astrale-os/sdk': owner.dependencies['@astrale-os/sdk'],
-            zod: owner.dependencies.zod,
-            jose: '6.2.3',
-          },
-          devDependencies: { esbuild: '0.28.2' },
-          engines: { node: '>=22.13' },
-        },
-        null,
-        2,
-      ) + '\n',
-      { flag: 'wx' },
-    )
-    await writeFile(
-      resolve(destination, 'service.json'),
-      JSON.stringify(
-        {
-          serviceKey: name,
-          vars: { KERNEL: '', TARGET: '' },
-        },
-        null,
-        2,
-      ) + '\n',
-      { flag: 'wx' },
-    )
-    console.log(
-      `Created ${destination}\nInstall dependencies, edit service.json and src/job.js, then run npm run deploy -- --instance <instance> --as <identity>.`,
-    )
-  } catch (error) {
-    console.error(
-      error.code === 'EEXIST' ? 'Destination already exists; no files overwritten.' : error.message,
-    )
-    process.exitCode = 1
-  }
-}

package/dist/scaffold/template/.env.example

@@ -1,2 +0,0 @@
-# Bind this through Services.setSecret; deployment does not read this file.
-ACCOUNT_PRIVATE_JWK=

package/dist/scaffold/template/README.md

@@ -1,37 +0,0 @@
-# Background Service
-
-This is plain compute, not a Domain. It does not publish or install an Application.
-
-1. Install dependencies with `npm install` (Node22.13+), and install the Astrale CLI separately.
-2. Edit `service.json`: KERNEL is the exact Kernel issuer (including /api when present); TARGET is
-   the canonical callable Path. Edit `src/job.js` to match that callable's input and business intent.
-3. Create a dedicated Identity in its business Domain, register its ES256 key on the same Node,
-   and grant only the required callable authority and business permissions. Use Shell.Group.assignMember
-   for supported custom groups; do not use Root or admin credentials in this Worker.
-4. Run `npm run deploy -- --instance <instance> --as <owner>`. It builds first and calls Services.
-   The returned Service ID belongs to compute; it is not the registered Identity Node ID.
-5. Use `CloudflareWorker.setSecret` on that Service ID to bind ACCOUNT_PRIVATE_JWK. Send its value
-   through stdin, not shell arguments or service.json. `.env.example` only names the secret.
-6. Verify the account's real call, then enable the cron through `CloudflareWorker.setSchedule`.
-
-```sh
-astrale call @SERVICE_ID::services.astrale.ai:class.CloudflareWorker.method.setSchedule \
-  --data '{"crons":["* * * * *"]}' -i INSTANCE --as OWNER --json
-astrale call @SERVICE_ID::services.astrale.ai:class.CloudflareWorker.method.logs \
-  tail=20 -i INSTANCE --as OWNER --json
-```
-
-The cron is a private Services-dispatched POST to /__scheduled, not a native Cloudflare scheduled
-export. The public dispatcher rejects that path; headers alone are not authentication. The job
-awaits the remote result before success and uses a 9s call budget under the current 10s dispatcher
-deadline. Health indicates compute is reachable, not that the account is registered or authorized.
-No exactly-once guarantee: design repeated or uncertain calls in the business Domain.
-
-Deployment uses the Services provider's default public-fetch routing. It requires the Services
-Runtime containing Domains PR210; publishing a schema package alone does not deploy that fix.
-Explicit compatibilityFlags in service.json replace defaults completely. Configuration changes
-require redeployment; no automatic fallback or provider-specific transport is embedded here.
-
-To stop, set crons to [] and observe convergence. Delete the Service through its public delete
-method, resuming a deleting result at retryAfterMs if necessary. Account/group/data retirement is
-a separate business operation. Never delete shared groups or uninstall another Domain implicitly.

package/dist/scaffold/template/gitignore

@@ -1,6 +0,0 @@
-node_modules/
-.dist/
-.env
-.env.*
-!.env.example
-*.private.jwk

package/dist/scaffold/template/scripts/build.mjs

@@ -1,10 +0,0 @@
-import { build } from 'esbuild'
-
-await build({
-  entryPoints: ['src/index.js'],
-  outfile: '.dist/worker.mjs',
-  bundle: true,
-  platform: 'browser',
-  format: 'esm',
-  target: 'es2022',
-})

package/dist/scaffold/template/scripts/deploy.mjs

@@ -1,50 +0,0 @@
-import { spawn } from 'node:child_process'
-import { readFile } from 'node:fs/promises'
-
-const args = process.argv.slice(2)
-if (args[0] === '--') args.shift()
-if (!args.some((arg) => arg === '-i' || /^(--instance|--url)(=|$)/.test(arg))) {
-  throw new Error(
-    'Select a Services instance explicitly: npm run deploy -- --instance <instance> --as <identity>',
-  )
-}
-const configuration = JSON.parse(await readFile('service.json', 'utf8'))
-await import('./build.mjs')
-const content = (await readFile('.dist/worker.mjs')).toString('base64')
-const request = {
-  ...configuration,
-  entry: 'index.mjs',
-  modules: [{ name: 'index.mjs', kind: 'esm', contentBase64Chunks: content.match(/.{1,524288}/g) }],
-}
-const child = spawn(
-  'astrale',
-  ['call', '/:services.astrale.ai:class.CloudflareWorker:deploy', ...args, '--json'],
-  {
-    stdio: ['pipe', 'pipe', 'inherit'],
-  },
-)
-let output = ''
-child.stdout.on('data', (chunk) => {
-  output += chunk
-})
-child.on('error', () => {
-  console.error('Could not start the Astrale CLI. Install @astrale-os/cli first.')
-  process.exitCode = 1
-})
-child.on('close', (code) => {
-  process.stdout.write(output)
-  if (code !== 0) {
-    process.exitCode = 1
-    return
-  }
-  try {
-    const result = JSON.parse(output)
-    if (result.state !== 'ready') process.exitCode = 1
-  } catch {
-    process.exitCode = 1
-  }
-})
-child.stdin.on('error', () => {
-  process.exitCode = 1
-})
-child.stdin.end(JSON.stringify(request))

package/dist/scaffold/template/src/account.js

@@ -1,26 +0,0 @@
-import { issuer, jwk, register } from '@astrale-os/sdk/auth'
-import { connect } from '@astrale-os/sdk/client/session'
-import { importJWK, SignJWT } from 'jose'
-
-export function openAccount(kernel, privateJwk) {
-  if (privateJwk.kty !== 'EC' || privateJwk.crv !== 'P-256' || !privateJwk.d) {
-    throw new TypeError('Expected a registered ES256 private JWK')
-  }
-  const publicKey = jwk.acceptPublic({ kty: 'EC', crv: 'P-256', x: privateJwk.x, y: privateJwk.y })
-  return connect({
-    url: kernel,
-    auth: {
-      ttlSeconds: 60,
-      resolve: async () => ({
-        credential: await new SignJWT({})
-          .setProtectedHeader({ alg: 'ES256', kid: privateJwk.kid, typ: 'JWT' })
-          .setIssuer(await register.selfIssuer(issuer.accept(kernel), publicKey))
-          .setSubject('self')
-          .setAudience(kernel)
-          .setIssuedAt()
-          .setExpirationTime('3m')
-          .sign(await importJWK(privateJwk, 'ES256')),
-      }),
-    },
-  })
-}

package/dist/scaffold/template/src/index.js

@@ -1,32 +0,0 @@
-import { runJob } from './job.js'
-
-export default {
-  async fetch(request, env) {
-    const path = new URL(request.url).pathname
-    if (path === '/health' && request.method === 'GET') return Response.json({ status: 'ok' })
-    if (path !== '/__scheduled' || request.method !== 'POST')
-      return new Response(null, { status: 404 })
-    // Services invokes this through private dispatch and blocks the public path.
-    const scheduledAt = Number(request.headers.get('x-astrale-scheduled-time'))
-    if (!Number.isSafeInteger(scheduledAt) || scheduledAt <= 0)
-      return new Response(null, { status: 400 })
-    const started = Date.now()
-    try {
-      await runJob({ scheduledAt, env, signal: AbortSignal.timeout(9000) })
-      console.log(
-        JSON.stringify({ event: 'job.completed', scheduledAt, elapsedMs: Date.now() - started }),
-      )
-      return Response.json({ status: 'completed' })
-    } catch (error) {
-      // Do not log credentials, provider envelopes or business result values.
-      console.error(
-        JSON.stringify({
-          event: 'job.failed',
-          scheduledAt,
-          code: typeof error?.code === 'number' ? error.code : undefined,
-        }),
-      )
-      return Response.json({ status: 'failed' }, { status: 503 })
-    }
-  },
-}

package/dist/scaffold/template/src/job.js

@@ -1,19 +0,0 @@
-import { Path } from '@astrale-os/sdk/graph/path'
-
-import { openAccount } from './account.js'
-
-// Adapt this input to the target Domain's contract. Repeat safety belongs there.
-export async function runJob({ scheduledAt, env, signal }) {
-  if (!env.KERNEL || !env.TARGET || !env.ACCOUNT_PRIVATE_JWK) {
-    throw new Error('Configure KERNEL, TARGET and the ACCOUNT_PRIVATE_JWK secret')
-  }
-  const session = openAccount(env.KERNEL, JSON.parse(env.ACCOUNT_PRIVATE_JWK))
-  try {
-    return await session.call(
-      { target: Path.parse(env.TARGET), input: { scheduledAt } },
-      { signal },
-    )
-  } finally {
-    session.close()
-  }
-}

package/dist/schema/modules/deployment/classes/deployment-line.d.ts

@@ -1,23 +0,0 @@
-import { z } from 'zod';
-/**
- * The line every deployment of one origin in one environment shares. The first organisation that
- * deploys on it holds it, and only an operator transfer gives it to another: it stays registered
- * and refused to every other organisation after its organisation, that organisation's Services or
- * every deployment on it are deleted.
- */
-export declare const DeploymentLine: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
-    readonly description: "The deployment line of one origin in one environment, held by one organisation.";
-    readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
-    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Timestamped">];
-    readonly properties: {
-        origin: z.ZodString;
-        environment: z.ZodString;
-        /** The 16-character fingerprint of `(origin, environment)`; it alone identifies the line. */
-        fingerprint: z.ZodString;
-        /** How the line reads in its deployments' labels: readable, or the fingerprint alone. */
-        line: z.ZodString;
-    };
-    readonly policies: {
-        read: () => import("@astrale-os/sdk/schema").Policy;
-    };
-}>;

package/dist/schema/modules/deployment/classes/deployment-line.js

@@ -1,24 +0,0 @@
-import { classIcon, fullMatch, K, nodeClass } from '@astrale-os/sdk/schema';
-import { GitBranch } from '@astrale-os/sdk/schema/icons';
-import { z } from 'zod';
-import { OwnLine } from '../policies/own-line.js';
-/**
- * The line every deployment of one origin in one environment shares. The first organisation that
- * deploys on it holds it, and only an operator transfer gives it to another: it stays registered
- * and refused to every other organisation after its organisation, that organisation's Services or
- * every deployment on it are deleted.
- */
-export const DeploymentLine = nodeClass({
-    description: 'The deployment line of one origin in one environment, held by one organisation.',
-    icon: classIcon.lucide(GitBranch),
-    extends: [K.classes.Timestamped],
-    properties: {
-        origin: z.string().min(1).max(253),
-        environment: z.string().min(1).max(63),
-        /** The 16-character fingerprint of `(origin, environment)`; it alone identifies the line. */
-        fingerprint: z.string().check(fullMatch('[a-z2-7]{16}')),
-        /** How the line reads in its deployments' labels: readable, or the fingerprint alone. */
-        line: z.string().min(16).max(40),
-    },
-    policies: { read: () => OwnLine },
-});

package/dist/schema/modules/deployment/classes/deployment-on-line.js

@@ -1,11 +0,0 @@
-import { edgeClass } from '@astrale-os/sdk/schema';
-import { TraverseOwnedLineDeployment } from '../policies/traverse-owned-line-deployment.js';
-import { DeploymentLine } from './deployment-line.js';
-import { Deployment } from './deployment.js';
-/** The line one deployment was made on; a deployment never moves to another line. */
-export const deployment_on_line = edgeClass.directed({
-    description: 'The deployment line one Deployment belongs to.',
-    source: { as: 'deployment', accepts: [() => Deployment], outgoing: '1' },
-    target: { as: 'line', accepts: [() => DeploymentLine], incoming: '0..*' },
-    policies: { traverse: () => TraverseOwnedLineDeployment },
-});

package/dist/schema/modules/deployment/classes/line-owned-by.d.ts

@@ -1,26 +0,0 @@
-/**
- * The organisation holding one deployment line: an Identity of the Admin instance, a Shell User
- * or Group, whose members and CI identities act for it through `extends_with`. A line outlives
- * this Edge: deleting its organisation removes the Edge and leaves the line held by nobody until
- * an operator transfer.
- *
- * Hence at most one holder, not exactly one: the Kernel deletes a Node only together with every
- * incident Edge, so a required holder would make the organisation undeletable unless its lines
- * went with it, and a deleted line would free its fingerprint for another organisation.
- */
-export declare const line_owned_by: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-    readonly depth: 0;
-    readonly abstract: false;
-    readonly extends: readonly [];
-    readonly properties: never;
-    readonly source: {
-        readonly as: "line";
-        readonly outgoing: "0..1";
-    };
-    readonly target: {
-        readonly as: "owner";
-        readonly incoming: "0..*";
-    };
-    readonly constraints: Record<never, never>;
-    readonly effectiveProperties: never;
-}>;

package/dist/schema/modules/deployment/classes/line-owned-by.js

@@ -1,19 +0,0 @@
-import { edgeClass, K } from '@astrale-os/sdk/schema';
-import { TraverseOwnedLine } from '../policies/traverse-owned-line.js';
-import { DeploymentLine } from './deployment-line.js';
-/**
- * The organisation holding one deployment line: an Identity of the Admin instance, a Shell User
- * or Group, whose members and CI identities act for it through `extends_with`. A line outlives
- * this Edge: deleting its organisation removes the Edge and leaves the line held by nobody until
- * an operator transfer.
- *
- * Hence at most one holder, not exactly one: the Kernel deletes a Node only together with every
- * incident Edge, so a required holder would make the organisation undeletable unless its lines
- * went with it, and a deleted line would free its fingerprint for another organisation.
- */
-export const line_owned_by = edgeClass.directed({
-    description: 'The organisation that holds one deployment line.',
-    source: { as: 'line', accepts: [() => DeploymentLine], outgoing: '0..1' },
-    target: { as: 'owner', accepts: [K.classes.Identity], incoming: '0..*' },
-    policies: { traverse: () => TraverseOwnedLine },
-});

package/dist/schema/modules/deployment/errors/deployment-label-not-found.d.ts

@@ -1,12 +0,0 @@
-import { z } from 'zod';
-/**
- * A label that names no deployment the caller may read: an unknown label and another
- * organisation's deployment answer alike, so the answer never tells one from the other.
- */
-export declare const deploymentLabelNotFound: Readonly<{
-    readonly family: "NOT_FOUND";
-    readonly message: "No deployment of yours has this label.";
-    readonly details: z.ZodObject<{
-        label: z.ZodString;
-    }, z.core.$strict>;
-}>;

package/dist/schema/modules/deployment/errors/deployment-label-not-found.js

@@ -1,11 +0,0 @@
-import { error } from '@astrale-os/sdk/schema/errors';
-import { z } from 'zod';
-/**
- * A label that names no deployment the caller may read: an unknown label and another
- * organisation's deployment answer alike, so the answer never tells one from the other.
- */
-export const deploymentLabelNotFound = error({
-    family: 'NOT_FOUND',
-    message: 'No deployment of yours has this label.',
-    details: z.strictObject({ label: z.string().min(1).max(63) }),
-});

package/dist/schema/modules/deployment/errors/deployment-registry-only.d.ts

@@ -1,11 +0,0 @@
-import { z } from 'zod';
-/**
- * Asked of retention by anyone but the registry Domain (`SERVICES_REGISTRY_ORIGIN`). Only the
- * registry knows which releases are published, so a line holder cannot keep its own preview by
- * marking it, and only the registry runs the expiry of every organisation's previews.
- */
-export declare const deploymentRegistryOnly: Readonly<{
-    readonly family: "UNSUPPORTED";
-    readonly message: "Only the registry Domain marks deployments published and expires previews.";
-    readonly details: z.ZodObject<{}, z.core.$strict>;
-}>;

package/dist/schema/modules/deployment/errors/deployment-registry-only.js

@@ -1,12 +0,0 @@
-import { error } from '@astrale-os/sdk/schema/errors';
-import { z } from 'zod';
-/**
- * Asked of retention by anyone but the registry Domain (`SERVICES_REGISTRY_ORIGIN`). Only the
- * registry knows which releases are published, so a line holder cannot keep its own preview by
- * marking it, and only the registry runs the expiry of every organisation's previews.
- */
-export const deploymentRegistryOnly = error({
-    family: 'UNSUPPORTED',
-    message: 'Only the registry Domain marks deployments published and expires previews.',
-    details: z.strictObject({}),
-});

package/dist/schema/modules/deployment/functions/deploy-cloudflare-deployment.js

@@ -1,14 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { deploymentRequest } from '../types/deployment-request.js';
-import { deploymentResponse } from '../types/deployment-response.js';
-/**
- * Host one release as an immutable deployment on its publisher's line. Any authenticated identity
- * may ask; the handler proves that it acts for the organisation it names before any write.
- */
-export const deployCloudflareDeployment = method({
-    description: 'Host one release as an immutable deployment on its publisher line.',
-    auth: 'authenticated',
-    static: true,
-    input: deploymentRequest,
-    output: deploymentResponse,
-});

package/dist/schema/modules/deployment/functions/describe-deployment-hosting.d.ts

@@ -1,8 +0,0 @@
-/** Where this Services runtime addresses the deployments it hosts. */
-export declare const describeDeploymentHosting: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-    readonly mode: 'value';
-    readonly value: {
-        routingDomain: string;
-        addressing: "opaque" | "readable";
-    };
-}, "authenticated", true, false, undefined>>;

package/dist/schema/modules/deployment/functions/describe-deployment-hosting.js

@@ -1,11 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { z } from 'zod';
-import { deploymentHosting } from '../types/deployment-hosting.js';
-/** Where this Services runtime addresses the deployments it hosts. */
-export const describeDeploymentHosting = method({
-    description: 'Describe the routing domain and line addressing of hosted deployments.',
-    auth: 'authenticated',
-    static: true,
-    input: z.strictObject({}),
-    output: deploymentHosting,
-});

package/dist/schema/modules/deployment/functions/expire-deployment-previews.d.ts

@@ -1,16 +0,0 @@
-/**
- * One pass of preview expiry over every line: a preview expires 30 days after its last call or
- * its activation, whichever is later, and a published deployment never does. The pass is a plan
- * unless the runtime enforces expiry. Only the registry Domain runs it.
- */
-export declare const expireDeploymentPreviews: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-    limit?: number | undefined;
-    apply?: boolean | undefined;
-}, {
-    readonly mode: 'value';
-    readonly value: {
-        planned: string[];
-        retired: string[];
-        pending: string[];
-    };
-}, "authenticated", true, false, undefined>>;

package/dist/schema/modules/deployment/functions/expire-deployment-previews.js

@@ -1,14 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { expirePreviewsInput, expirePreviewsOutput } from '../types/deployment-retention.js';
-/**
- * One pass of preview expiry over every line: a preview expires 30 days after its last call or
- * its activation, whichever is later, and a published deployment never does. The pass is a plan
- * unless the runtime enforces expiry. Only the registry Domain runs it.
- */
-export const expireDeploymentPreviews = method({
-    description: 'Plan, or where enforced apply, the expiry of previews uncalled for 30 days.',
-    auth: 'authenticated',
-    static: true,
-    input: expirePreviewsInput,
-    output: expirePreviewsOutput,
-});

package/dist/schema/modules/deployment/functions/list-cloudflare-deployment-secret-names.d.ts

@@ -1,5 +0,0 @@
-/** Decided as `setSecret`: `OwnDeployment` for the caller, before the deployment is read. */
-export declare const listCloudflareDeploymentSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-    readonly mode: 'value';
-    readonly value: string[];
-}, "authenticated", false, false, undefined>>;

package/dist/schema/modules/deployment/functions/list-cloudflare-deployment-secret-names.js

@@ -1,4 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { listDeploymentSecretNamesContract } from '../types/deployment-secret.js';
-/** Decided as `setSecret`: `OwnDeployment` for the caller, before the deployment is read. */
-export const listCloudflareDeploymentSecretNames = method(listDeploymentSecretNamesContract);

package/dist/schema/modules/deployment/functions/list-cloudflare-deployments.js

@@ -1,10 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { listDeploymentsInput, listDeploymentsOutput } from '../types/deployment-hosting.js';
-/** The deployments of the lines the caller holds, or acts for through `extends_with`. */
-export const listCloudflareDeployments = method({
-    description: 'List the deployments of the lines the caller holds.',
-    auth: 'authenticated',
-    static: true,
-    input: listDeploymentsInput,
-    output: listDeploymentsOutput,
-});

package/dist/schema/modules/deployment/functions/list-deployment-secret-names.d.ts

@@ -1,4 +0,0 @@
-export declare const listDeploymentSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-    readonly mode: 'value';
-    readonly value: string[];
-}, "authenticated", false, true, undefined>>;

package/dist/schema/modules/deployment/functions/list-deployment-secret-names.js

@@ -1,6 +0,0 @@
-import { method } from '@astrale-os/sdk/schema';
-import { listDeploymentSecretNamesContract } from '../types/deployment-secret.js';
-export const listDeploymentSecretNames = method({
-    ...listDeploymentSecretNamesContract,
-    abstract: true,
-});

package/dist/schema/modules/deployment/functions/read-deployment-last-calls.d.ts

@@ -1,10 +0,0 @@
-/**
- * The last call of each deployment named, as the dispatcher counted it. The caller must hold
- * every label's line; the registry Domain may read any label.
- */
-export declare const readDeploymentLastCalls: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
-    labels: string[];
-}, {
-    readonly mode: 'value';
-    readonly value: Record<string, string | null>;
-}, "authenticated", true, false, undefined>>;