@astrale-domains/services 0.5.1 → 0.7.0

package/dist/scaffold/template/src/index.js

@@ -0,0 +1,50 @@
+import { runJob } from './job.js'
+
+/** The call budget of one scheduled run, under the dispatcher's 10 s deadline. */
+const JOB_BUDGET_MS = 9_000
+
+export default {
+  /**
+   * Admin's Services serves this Worker at its deployment URL and at its Service's URL. A cron of
+   * the Service reaches it as `POST /__scheduled` from the Services dispatcher alone, with the cron
+   * in `x-astrale-cron` and the dispatcher's scheduled time (epoch ms, not rounded to the minute) in
+   * `x-astrale-scheduled-time`: the dispatcher refuses that path to the public, in every spelling.
+   */
+  async fetch(request, env) {
+    const path = new URL(request.url).pathname
+    if (path === '/health' && request.method === 'GET') {
+      return new Response('ok', {
+        headers: { 'x-astrale-worker-version': env.ASTRALE_VERSION_METADATA?.id ?? '' },
+      })
+    }
+    if (path === '/__scheduled' && request.method === 'POST') return scheduled(request, env)
+    return new Response(null, { status: 404 })
+  },
+}
+
+async function scheduled(request, env) {
+  const cron = request.headers.get('x-astrale-cron')
+  const scheduledAt = Number(request.headers.get('x-astrale-scheduled-time'))
+  if (cron === null || !Number.isSafeInteger(scheduledAt) || scheduledAt <= 0) {
+    return new Response(null, { status: 400 })
+  }
+  const started = Date.now()
+  try {
+    await runJob({ cron, scheduledAt, env, signal: AbortSignal.timeout(JOB_BUDGET_MS) })
+    console.log(
+      JSON.stringify({ event: 'job.completed', cron, scheduledAt, ms: Date.now() - started }),
+    )
+    return Response.json({ status: 'completed' })
+  } catch (error) {
+    // Never log a credential, a provider envelope or a business value: only the error's code.
+    console.error(
+      JSON.stringify({
+        event: 'job.failed',
+        cron,
+        scheduledAt,
+        code: typeof error?.code === 'number' ? error.code : undefined,
+      }),
+    )
+    return Response.json({ status: 'failed' }, { status: 503 })
+  }
+}

package/dist/scaffold/template/src/job.js

@@ -0,0 +1,22 @@
+import { Path } from '@astrale-os/sdk/graph/path'
+
+import { openAccount } from './account.js'
+
+/**
+ * The job one cron runs: call one callable of an Astrale Kernel as this Service's own account.
+ * Adapt its input to the target's contract; a repeated or uncertain run is the target's to absorb.
+ */
+export async function runJob({ cron, scheduledAt, env, signal }) {
+  if (!env.KERNEL || !env.TARGET || !env.ACCOUNT_PRIVATE_JWK) {
+    throw new Error('Configure KERNEL, TARGET and the ACCOUNT_PRIVATE_JWK secret.')
+  }
+  const session = openAccount(env.KERNEL, JSON.parse(env.ACCOUNT_PRIVATE_JWK))
+  try {
+    return await session.call(
+      { target: Path.parse(env.TARGET), input: { cron, scheduledAt } },
+      { signal },
+    )
+  } finally {
+    session.close()
+  }
+}

package/dist/schema/index.d.ts

@@ -2,5 +2,5 @@ export { schema } from './schema.js';
 export type { ServicesDomain, ServicesSchema } from './schema.js';
 export { ActAs, CloudflareService, OwnService, Service, TraverseOwnedService, serviceLifecycle, service_owned_by, } from './modules/service/index.js';
 export type { ServiceLifecycle, ServiceLifecycleEvent } from './modules/service/index.js';
-export { artifactModule, assetBundle, assetFile, CloudflareDeployment, Deployment, OwnDeployment, TraverseOwnedServiceDeployment, current_deployment, deployment_of, deploymentCommit, deploymentHosting, deploymentLifecycle, deploymentRecord, deploymentRejection, deploymentRequest, deploymentResponse, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listedDeploymentSummary, retireDeploymentOutput, unadmittedDeploymentSummary, } from './modules/deployment/index.js';
-export type { ArtifactModule, AssetBundle, DeploymentHosting, DeploymentLifecycle, DeploymentLifecycleEvent, DeploymentRecord, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, FrozenConfiguration, ListedDeploymentSummary, RetireDeploymentResult, UnadmittedDeploymentSummary, } from './modules/deployment/index.js';
+export { CloudflareDeployment, Deployment, OwnDeployment, TraverseOwnedServiceDeployment, current_deployment, deployment_of, deploymentHosting, deploymentLifecycle, deploymentRejection, deploymentRequest, deploymentResponse, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, retireDeploymentOutput, workerConfiguration, workerRecord, } from './modules/deployment/index.js';
+export type { DeploymentHosting, DeploymentLifecycle, DeploymentLifecycleEvent, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, RetireDeploymentResult, WorkerConfiguration, WorkerRecordWire, } from './modules/deployment/index.js';

package/dist/schema/index.js

@@ -1,3 +1,3 @@
 export { schema } from './schema.js';
 export { ActAs, CloudflareService, OwnService, Service, TraverseOwnedService, serviceLifecycle, service_owned_by, } from './modules/service/index.js';
-export { artifactModule, assetBundle, assetFile, CloudflareDeployment, Deployment, OwnDeployment, TraverseOwnedServiceDeployment, current_deployment, deployment_of, deploymentCommit, deploymentHosting, deploymentLifecycle, deploymentRecord, deploymentRejection, deploymentRequest, deploymentResponse, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listedDeploymentSummary, retireDeploymentOutput, unadmittedDeploymentSummary, } from './modules/deployment/index.js';
+export { CloudflareDeployment, Deployment, OwnDeployment, TraverseOwnedServiceDeployment, current_deployment, deployment_of, deploymentHosting, deploymentLifecycle, deploymentRejection, deploymentRequest, deploymentResponse, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, retireDeploymentOutput, workerConfiguration, workerRecord, } from './modules/deployment/index.js';

package/dist/schema/modules/deployment/classes/cloudflare-deployment.d.ts

@@ -29,66 +29,25 @@ export declare const CloudflareDeployment: import("@astrale-os/sdk/schema").Auth
                 required?: boolean;
                 description?: string;
             }>;
-            record: import("zod").ZodObject<{
-                format: import("zod").ZodLiteral<"astrale.deployment-record">;
-                version: import("zod").ZodLiteral<1>;
-                origin: import("zod").ZodString;
-                environment: import("zod").ZodString;
-                releaseDigest: import("zod").ZodString;
-                buildDigest: import("zod").ZodString;
-                schemaRevision: import("zod").ZodString;
-                configuration: import("zod").ZodString;
-                providerScript: import("zod").ZodString;
-                commit: import("zod").ZodNullable<import("zod").ZodObject<{
-                    sha: import("zod").ZodString;
-                    dirty: import("zod").ZodBoolean;
-                    base: import("zod").ZodOptional<import("zod").ZodObject<{
-                        version: import("zod").ZodString;
-                        distance: import("zod").ZodNumber;
-                    }, import("zod/v4/core").$strict>>;
-                }, import("zod/v4/core").$strict>>;
-            }, import("zod/v4/core").$strict>;
+            buildDigest: import("zod").ZodString;
             configuration: import("zod").ZodObject<{
-                format: import("zod").ZodLiteral<"astrale.deployment.configuration">;
+                format: import("zod").ZodLiteral<"astrale.worker.configuration">;
                 version: import("zod").ZodLiteral<1>;
+                compatibilityDate: import("zod").ZodString;
+                compatibilityFlags: import("zod").ZodArray<import("zod").ZodString>;
                 vars: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>;
-                settings: import("zod").ZodObject<{
-                    maximumRequestBytes: import("zod").ZodNumber;
-                    invocationTimeoutMs: import("zod").ZodNumber;
-                    tokenExchange: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<false>, import("zod").ZodObject<{
-                        maximumLifetimeSeconds: import("zod").ZodNumber;
-                    }, import("zod/v4/core").$strict>]>;
-                    durableOptions: import("zod").ZodOptional<import("zod").ZodObject<{
-                        retentionMs: import("zod").ZodOptional<import("zod").ZodNumber>;
-                        retry: import("zod").ZodOptional<import("zod").ZodObject<{
-                            initialIntervalMs: import("zod").ZodOptional<import("zod").ZodNumber>;
-                            maxAttempts: import("zod").ZodOptional<import("zod").ZodNumber>;
-                            maxIntervalMs: import("zod").ZodOptional<import("zod").ZodNumber>;
-                        }, import("zod/v4/core").$strict>>;
-                        stepTimeoutMs: import("zod").ZodOptional<import("zod").ZodNumber>;
-                    }, import("zod/v4/core").$strict>>;
-                }, import("zod/v4/core").$strict>;
-                runtime: import("zod").ZodObject<{
-                    compatibilityDate: import("zod").ZodString;
-                    compatibilityFlags: import("zod").ZodArray<import("zod").ZodString>;
-                }, import("zod/v4/core").$strict>;
-                bindings: import("zod").ZodObject<{
-                    services: import("zod").ZodArray<import("zod").ZodObject<{
-                        name: import("zod").ZodString;
-                        service: import("zod").ZodString;
-                    }, import("zod/v4/core").$strict>>;
-                    dispatchNamespaces: import("zod").ZodArray<import("zod").ZodObject<{
-                        name: import("zod").ZodString;
-                        namespace: import("zod").ZodString;
-                    }, import("zod/v4/core").$strict>>;
-                    secrets: import("zod").ZodArray<import("zod").ZodString>;
-                }, import("zod/v4/core").$strict>;
-                router: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<false>, import("zod").ZodObject<{
-                    service: import("zod").ZodString;
-                    hostSuffix: import("zod").ZodString;
-                    minLabels: import("zod").ZodNumber;
-                }, import("zod/v4/core").$strict>]>;
+                secrets: import("zod").ZodArray<import("zod").ZodString>;
+                record: import("zod").ZodBoolean;
+                signingIdentity: import("zod").ZodBoolean;
+                router: import("zod").ZodBoolean;
             }, import("zod/v4/core").$strict>;
+            configurationDigest: import("zod").ZodString;
+            record: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodObject<{
+                contentType: import("zod").ZodString;
+                contentBase64: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>, {
+                readonly required: false;
+            }>;
             secretDigests: import("@astrale-os/sdk/schema").AuthoredProperty<import("zod").ZodArray<import("zod").ZodObject<{
                 name: import("zod").ZodString;
                 digest: import("zod").ZodString;

package/dist/schema/modules/deployment/classes/deployment.d.ts

@@ -1,9 +1,9 @@
 import { z } from 'zod';
 /**
- * One immutable deployment of one Service: one build in one environment with its frozen
- * configuration, served by one script at its own URL. It never changes code; a new release is a new
- * deployment of the same Service. Only its secrets rotate in place, under the names its
- * configuration declares.
+ * One immutable deployment of one Service: one Worker build with its configuration, served by one
+ * script at its own URL. It never changes code; a new release is a new deployment of the
+ * same Service. Only its secrets rotate in place, under the names its configuration declares.
+ * Services knows nothing of what the Worker serves: the record it publishes is opaque bytes.
  */
 export declare const Deployment: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly abstract: true;
@@ -34,67 +34,29 @@ export declare const Deployment: import("@astrale-os/sdk/schema").AuthoredNodeCl
             required?: boolean;
             description?: string;
         }>;
-        record: z.ZodObject<{
-            format: z.ZodLiteral<"astrale.deployment-record">;
-            version: z.ZodLiteral<1>;
-            origin: z.ZodString;
-            environment: z.ZodString;
-            releaseDigest: z.ZodString;
-            buildDigest: z.ZodString;
-            schemaRevision: z.ZodString;
-            configuration: z.ZodString;
-            providerScript: z.ZodString;
-            commit: z.ZodNullable<z.ZodObject<{
-                sha: z.ZodString;
-                dirty: z.ZodBoolean;
-                base: z.ZodOptional<z.ZodObject<{
-                    version: z.ZodString;
-                    distance: z.ZodNumber;
-                }, z.core.$strict>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>;
-        /** The configuration frozen into this deployment; its digest is `record.configuration`. */
+        /** The build digest of the uploaded Worker, bound as `ASTRALE_BUILD_DIGEST`. */
+        buildDigest: z.ZodString;
+        /** The configuration frozen into this deployment. */
         configuration: z.ZodObject<{
-            format: z.ZodLiteral<"astrale.deployment.configuration">;
+            format: z.ZodLiteral<"astrale.worker.configuration">;
             version: z.ZodLiteral<1>;
+            compatibilityDate: z.ZodString;
+            compatibilityFlags: z.ZodArray<z.ZodString>;
             vars: z.ZodRecord<z.ZodString, z.ZodString>;
-            settings: z.ZodObject<{
-                maximumRequestBytes: z.ZodNumber;
-                invocationTimeoutMs: z.ZodNumber;
-                tokenExchange: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
-                    maximumLifetimeSeconds: z.ZodNumber;
-                }, z.core.$strict>]>;
-                durableOptions: z.ZodOptional<z.ZodObject<{
-                    retentionMs: z.ZodOptional<z.ZodNumber>;
-                    retry: z.ZodOptional<z.ZodObject<{
-                        initialIntervalMs: z.ZodOptional<z.ZodNumber>;
-                        maxAttempts: z.ZodOptional<z.ZodNumber>;
-                        maxIntervalMs: z.ZodOptional<z.ZodNumber>;
-                    }, z.core.$strict>>;
-                    stepTimeoutMs: z.ZodOptional<z.ZodNumber>;
-                }, z.core.$strict>>;
-            }, z.core.$strict>;
-            runtime: z.ZodObject<{
-                compatibilityDate: z.ZodString;
-                compatibilityFlags: z.ZodArray<z.ZodString>;
-            }, z.core.$strict>;
-            bindings: z.ZodObject<{
-                services: z.ZodArray<z.ZodObject<{
-                    name: z.ZodString;
-                    service: z.ZodString;
-                }, z.core.$strict>>;
-                dispatchNamespaces: z.ZodArray<z.ZodObject<{
-                    name: z.ZodString;
-                    namespace: z.ZodString;
-                }, z.core.$strict>>;
-                secrets: z.ZodArray<z.ZodString>;
-            }, z.core.$strict>;
-            router: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
-                service: z.ZodString;
-                hostSuffix: z.ZodString;
-                minLabels: z.ZodNumber;
-            }, z.core.$strict>]>;
+            secrets: z.ZodArray<z.ZodString>;
+            record: z.ZodBoolean;
+            signingIdentity: z.ZodBoolean;
+            router: z.ZodBoolean;
         }, z.core.$strict>;
+        /** The digest of `configuration` (`workerConfigurationDigest`). */
+        configurationDigest: z.ZodString;
+        /** The record the deployment publishes, when its configuration asks for one. */
+        record: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodObject<{
+            contentType: z.ZodString;
+            contentBase64: z.ZodString;
+        }, z.core.$strict>, {
+            readonly required: false;
+        }>;
         /** The keyed digest of each secret bound to this deployment, never a value. */
         secretDigests: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
@@ -109,6 +71,7 @@ export declare const Deployment: import("@astrale-os/sdk/schema").AuthoredNodeCl
         scriptEtag: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
         }>;
+        /** The thumbprint of the deployment's own key, when its configuration asks for one. */
         signingKeyId: import("@astrale-os/sdk/schema").AuthoredProperty<z.ZodString, {
             readonly required: false;
         }>;

package/dist/schema/modules/deployment/classes/deployment.js

@@ -1,13 +1,14 @@
-import { classIcon, K, nodeClass, property, schema as valueSchema, stateProperty, } from '@astrale-os/sdk/schema';
+import { classIcon, fullMatch, K, nodeClass, property, schema as valueSchema, stateProperty, } from '@astrale-os/sdk/schema';
 import { Rocket } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
 import { deploymentLifecycle } from '../states/index.js';
-import { deploymentRecord, deploymentSecretDigests, frozenConfiguration } from '../types/index.js';
+import { deploymentSecretDigests, workerConfiguration, workerRecord } from '../types/index.js';
+const digest = z.string().check(fullMatch('sha256:[0-9a-f]{64}'));
 /**
- * One immutable deployment of one Service: one build in one environment with its frozen
- * configuration, served by one script at its own URL. It never changes code; a new release is a new
- * deployment of the same Service. Only its secrets rotate in place, under the names its
- * configuration declares.
+ * One immutable deployment of one Service: one Worker build with its configuration, served by one
+ * script at its own URL. It never changes code; a new release is a new deployment of the
+ * same Service. Only its secrets rotate in place, under the names its configuration declares.
+ * Services knows nothing of what the Worker serves: the record it publishes is opaque bytes.
  */
 export const Deployment = nodeClass({
     abstract: true,
@@ -19,9 +20,14 @@ export const Deployment = nodeClass({
         label: z.string().min(33).max(57),
         url: z.string().min(1).max(2_048),
         state: stateProperty(deploymentLifecycle),
-        record: deploymentRecord,
-        /** The configuration frozen into this deployment; its digest is `record.configuration`. */
-        configuration: frozenConfiguration,
+        /** The build digest of the uploaded Worker, bound as `ASTRALE_BUILD_DIGEST`. */
+        buildDigest: digest,
+        /** The configuration frozen into this deployment. */
+        configuration: workerConfiguration,
+        /** The digest of `configuration` (`workerConfigurationDigest`). */
+        configurationDigest: digest,
+        /** The record the deployment publishes, when its configuration asks for one. */
+        record: property(workerRecord, { required: false }),
         /** The keyed digest of each secret bound to this deployment, never a value. */
         secretDigests: property(deploymentSecretDigests, { required: false }),
         /**
@@ -29,6 +35,7 @@ export const Deployment = nodeClass({
          * identifies the deployment; a secret rewritten in place keeps it, unlike a provider version.
          */
         scriptEtag: property(z.string().min(1).max(128), { required: false }),
+        /** The thumbprint of the deployment's own key, when its configuration asks for one. */
         signingKeyId: property(z.string().min(1).max(128), { required: false }),
         activatedAt: property(valueSchema.values.instant, { required: false }),
         retiredAt: property(valueSchema.values.instant, { required: false }),

package/dist/schema/modules/deployment/index.d.ts

@@ -1,5 +1,5 @@
-export { artifactModule, assetBundle, assetFile, deploymentCommit, deploymentHosting, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listDeploymentsInput, listDeploymentsOutput, listedDeploymentSummary, retireDeploymentInput, retireDeploymentOutput, unadmittedDeploymentSummary, } from './types/index.js';
-export type { ArtifactModule, AssetBundle, ServiceDeploymentContent, DeploymentHosting, DeploymentRecord, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, FrozenConfiguration, ListedDeploymentSummary, RetireDeploymentResult, UnadmittedDeploymentSummary, } from './types/index.js';
+export { deploymentHosting, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, listDeploymentsInput, listDeploymentsOutput, retireDeploymentInput, retireDeploymentOutput, workerConfiguration, workerRecord, } from './types/index.js';
+export type { DeploymentHosting, DeploymentRejection, DeploymentRejectionReason, DeploymentRequest, DeploymentResponse, DeploymentSecretDigest, DeploymentSecretRejection, DeploymentSummary, RetireDeploymentResult, WorkerConfiguration, WorkerRecordWire, } from './types/index.js';
 export { CloudflareDeployment, Deployment, current_deployment, deployment_of, } from './classes/index.js';
 export { deploymentHostingUnavailable, deploymentNotFound } from './errors/index.js';
 export { retireDeployment } from './functions/index.js';

package/dist/schema/modules/deployment/index.js

@@ -1,6 +1,6 @@
 // Types first: the service module's Methods read them while this module's classes, which refer
 // to the Service class, are still evaluating.
-export { artifactModule, assetBundle, assetFile, deploymentCommit, deploymentHosting, deploymentRecord, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, frozenConfiguration, listDeploymentsInput, listDeploymentsOutput, listedDeploymentSummary, retireDeploymentInput, retireDeploymentOutput, unadmittedDeploymentSummary, } from './types/index.js';
+export { deploymentHosting, deploymentRejection, deploymentRejectionReason, deploymentRequest, deploymentResponse, deploymentSecretDigest, deploymentSecretDigests, deploymentSecretRejection, deploymentSummary, listDeploymentsInput, listDeploymentsOutput, retireDeploymentInput, retireDeploymentOutput, workerConfiguration, workerRecord, } from './types/index.js';
 export { CloudflareDeployment, Deployment, current_deployment, deployment_of, } from './classes/index.js';
 export { deploymentHostingUnavailable, deploymentNotFound } from './errors/index.js';
 export { retireDeployment } from './functions/index.js';

package/dist/schema/modules/deployment/types/deployment-hosting.d.ts

@@ -1,62 +1,27 @@
 import { z } from 'zod';
-/** Where this Services runtime addresses Services and deployments; their names are opaque. */
+/**
+ * `WorkerHostingV1`: the routing domain Services and deployments are addressed under. Every name is
+ * opaque: `https://<service>.<routing domain>` serves a Service, `https://<label>.<routing domain>`
+ * one deployment.
+ */
 export declare const deploymentHosting: z.ZodObject<{
     routingDomain: z.ZodString;
-    addressing: z.ZodLiteral<"opaque">;
 }, z.core.$strict>;
+/** `WorkerDeploymentListRequestV1`: the caller's deployments, of one project or environment. */
 export declare const listDeploymentsInput: z.ZodObject<{
-    origin: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodString>;
     environment: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
-/**
- * The deployments of the caller's Services. A deployment whose stored record or configuration this
- * Services SDK no longer admits is listed from its facts with its record as stored, never dropped,
- * and never fails the listing.
- */
+/** The deployments of the caller's Services, by creation then label. */
 export declare const listDeploymentsOutput: z.ZodObject<{
-    deployments: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-        id: z.ZodString;
-        url: z.ZodString;
-        label: z.ZodString;
-        serviceId: z.ZodString;
-        service: z.ZodString;
-        owner: z.ZodString;
-        state: z.ZodEnum<{
-            active: "active";
-            deploying: "deploying";
-            failed: "failed";
-            retired: "retired";
-            retiring: "retiring";
-        }>;
-        current: z.ZodBoolean;
-        createdAt: z.ZodString;
-        retiredAt: z.ZodOptional<z.ZodString>;
-        signingKeyId: z.ZodString;
-        record: z.ZodObject<{
-            format: z.ZodLiteral<"astrale.deployment-record">;
-            version: z.ZodLiteral<1>;
-            origin: z.ZodString;
-            environment: z.ZodString;
-            releaseDigest: z.ZodString;
-            buildDigest: z.ZodString;
-            schemaRevision: z.ZodString;
-            configuration: z.ZodString;
-            providerScript: z.ZodString;
-            commit: z.ZodNullable<z.ZodObject<{
-                sha: z.ZodString;
-                dirty: z.ZodBoolean;
-                base: z.ZodOptional<z.ZodObject<{
-                    version: z.ZodString;
-                    distance: z.ZodNumber;
-                }, z.core.$strict>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>;
-    }, z.core.$strict>, z.ZodObject<{
+    deployments: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         url: z.ZodString;
         label: z.ZodString;
         serviceId: z.ZodString;
         service: z.ZodString;
+        project: z.ZodString;
+        environment: z.ZodString;
         owner: z.ZodString;
         state: z.ZodEnum<{
             active: "active";
@@ -68,8 +33,13 @@ export declare const listDeploymentsOutput: z.ZodObject<{
         current: z.ZodBoolean;
         createdAt: z.ZodString;
         retiredAt: z.ZodOptional<z.ZodString>;
-        signingKeyId: z.ZodString;
-        record: z.ZodUnknown;
-    }, z.core.$strict>]>>;
+        buildDigest: z.ZodString;
+        configuration: z.ZodString;
+        signingKeyId: z.ZodOptional<z.ZodString>;
+        record: z.ZodOptional<z.ZodObject<{
+            contentType: z.ZodString;
+            contentBase64: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type DeploymentHosting = z.output<typeof deploymentHosting>;

package/dist/schema/modules/deployment/types/deployment-hosting.js

@@ -1,19 +1,19 @@
 import { z } from 'zod';
-import { listedDeploymentSummary } from './deployment-summary.js';
-/** Where this Services runtime addresses Services and deployments; their names are opaque. */
+import { deploymentSummary } from './deployment-summary.js';
+/**
+ * `WorkerHostingV1`: the routing domain Services and deployments are addressed under. Every name is
+ * opaque: `https://<service>.<routing domain>` serves a Service, `https://<label>.<routing domain>`
+ * one deployment.
+ */
 export const deploymentHosting = z.strictObject({
     routingDomain: z.string().min(1).max(253),
-    addressing: z.literal('opaque'),
 });
+/** `WorkerDeploymentListRequestV1`: the caller's deployments, of one project or environment. */
 export const listDeploymentsInput = z.strictObject({
-    origin: z.string().min(1).max(253).optional(),
+    project: z.string().min(1).max(253).optional(),
     environment: z.string().min(1).max(63).optional(),
 });
-/**
- * The deployments of the caller's Services. A deployment whose stored record or configuration this
- * Services SDK no longer admits is listed from its facts with its record as stored, never dropped,
- * and never fails the listing.
- */
+/** The deployments of the caller's Services, by creation then label. */
 export const listDeploymentsOutput = z.strictObject({
-    deployments: z.array(listedDeploymentSummary),
+    deployments: z.array(deploymentSummary),
 });