@astrale-domains/services 0.5.1 → 0.7.0

package/dist/schema/modules/deployment/types/deployment-request.d.ts

@@ -1,84 +1,43 @@
 import { z } from 'zod';
 /**
- * `DeploymentRequestV1`: one release to host as a deployment of the Service of its origin and
- * environment. Services recomputes the build digest from the uploaded bytes and the label from the
- * Service name, the build and the configuration; the request states both so a deployer that
- * computed another address is refused rather than served elsewhere. The secrets are the
- * environment's current values, bound to the new deployment only.
+ * `WorkerDeploymentRequestV1` (`@astrale-os/sdk/deployment/worker`): one Cloudflare Worker release
+ * to host as a deployment of the Service of its project and environment, whatever it serves. This
+ * shape only bounds what the request carries: Services decodes it with the SDK's
+ * `decodeWorkerDeploymentRequest`, which recomputes the build digest from the uploaded bytes and
+ * the label from the Service name, the build and the configuration, and refuses a request that
+ * states another. The secrets are bound to a new deployment only, or rewritten in place on the one
+ * the label already names; Services never keeps a value.
  */
 export declare const deploymentRequest: z.ZodObject<{
-    format: z.ZodLiteral<"astrale.services.deployment-request">;
+    format: z.ZodLiteral<"astrale.worker.deployment-request">;
     version: z.ZodLiteral<1>;
     owner: z.ZodOptional<z.ZodString>;
-    origin: z.ZodString;
+    project: z.ZodString;
     environment: z.ZodString;
-    addressing: z.ZodLiteral<"opaque">;
     label: z.ZodString;
     buildDigest: z.ZodString;
     configuration: z.ZodObject<{
-        format: z.ZodLiteral<"astrale.deployment.configuration">;
+        format: z.ZodLiteral<"astrale.worker.configuration">;
         version: z.ZodLiteral<1>;
+        compatibilityDate: z.ZodString;
+        compatibilityFlags: z.ZodArray<z.ZodString>;
         vars: z.ZodRecord<z.ZodString, z.ZodString>;
-        settings: z.ZodObject<{
-            maximumRequestBytes: z.ZodNumber;
-            invocationTimeoutMs: z.ZodNumber;
-            tokenExchange: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
-                maximumLifetimeSeconds: z.ZodNumber;
-            }, z.core.$strict>]>;
-            durableOptions: z.ZodOptional<z.ZodObject<{
-                retentionMs: z.ZodOptional<z.ZodNumber>;
-                retry: z.ZodOptional<z.ZodObject<{
-                    initialIntervalMs: z.ZodOptional<z.ZodNumber>;
-                    maxAttempts: z.ZodOptional<z.ZodNumber>;
-                    maxIntervalMs: z.ZodOptional<z.ZodNumber>;
-                }, z.core.$strict>>;
-                stepTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>;
-        runtime: z.ZodObject<{
-            compatibilityDate: z.ZodString;
-            compatibilityFlags: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>;
-        bindings: z.ZodObject<{
-            services: z.ZodArray<z.ZodObject<{
-                name: z.ZodString;
-                service: z.ZodString;
-            }, z.core.$strict>>;
-            dispatchNamespaces: z.ZodArray<z.ZodObject<{
-                name: z.ZodString;
-                namespace: z.ZodString;
-            }, z.core.$strict>>;
-            secrets: z.ZodArray<z.ZodString>;
-        }, z.core.$strict>;
-        router: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
-            service: z.ZodString;
-            hostSuffix: z.ZodString;
-            minLabels: z.ZodNumber;
-        }, z.core.$strict>]>;
-    }, z.core.$strict>;
-    record: z.ZodObject<{
-        releaseDigest: z.ZodString;
-        schemaRevision: z.ZodString;
-        schemaBundle: z.ZodString;
-        commit: z.ZodNullable<z.ZodObject<{
-            sha: z.ZodString;
-            dirty: z.ZodBoolean;
-            base: z.ZodOptional<z.ZodObject<{
-                version: z.ZodString;
-                distance: z.ZodNumber;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
+        secrets: z.ZodArray<z.ZodString>;
+        record: z.ZodBoolean;
+        signingIdentity: z.ZodBoolean;
+        router: z.ZodBoolean;
     }, z.core.$strict>;
-    bundle: z.ZodObject<{
-        entrypoint: z.ZodString;
+    worker: z.ZodObject<{
+        manifest: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        mainModule: z.ZodString;
         modules: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
-            kind: z.ZodOptional<z.ZodEnum<{
+            kind: z.ZodEnum<{
                 data: "data";
                 esm: "esm";
                 text: "text";
                 wasm: "wasm";
-            }>>;
+            }>;
             content: z.ZodUnion<readonly [z.ZodObject<{
                 encoding: z.ZodEnum<{
                     gzip: "gzip";
@@ -95,39 +54,32 @@ export declare const deploymentRequest: z.ZodObject<{
                 contentBase64Chunks: z.ZodArray<z.ZodString>;
             }, z.core.$strict>]>;
         }, z.core.$strict>>;
-        assets: z.ZodOptional<z.ZodObject<{
-            files: z.ZodArray<z.ZodObject<{
-                path: z.ZodString;
-                contentType: z.ZodOptional<z.ZodString>;
-                content: z.ZodUnion<readonly [z.ZodObject<{
-                    encoding: z.ZodEnum<{
-                        gzip: "gzip";
-                        identity: "identity";
-                    }>;
-                    decodedSize: z.ZodNumber;
-                    contentBase64: z.ZodString;
-                }, z.core.$strict>, z.ZodObject<{
-                    encoding: z.ZodEnum<{
-                        gzip: "gzip";
-                        identity: "identity";
-                    }>;
-                    decodedSize: z.ZodNumber;
-                    contentBase64Chunks: z.ZodArray<z.ZodString>;
-                }, z.core.$strict>]>;
-            }, z.core.$strict>>;
-            notFound: z.ZodOptional<z.ZodEnum<{
-                "404-page": "404-page";
-                none: "none";
-                "single-page-application": "single-page-application";
-            }>>;
-            runWorkerFirst: z.ZodOptional<z.ZodBoolean>;
-            htmlHandling: z.ZodOptional<z.ZodLiteral<"none">>;
-        }, z.core.$strict>>;
+        assets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            contentType: z.ZodOptional<z.ZodString>;
+            content: z.ZodUnion<readonly [z.ZodObject<{
+                encoding: z.ZodEnum<{
+                    gzip: "gzip";
+                    identity: "identity";
+                }>;
+                decodedSize: z.ZodNumber;
+                contentBase64: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                encoding: z.ZodEnum<{
+                    gzip: "gzip";
+                    identity: "identity";
+                }>;
+                decodedSize: z.ZodNumber;
+                contentBase64Chunks: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>;
+        }, z.core.$strict>>>;
     }, z.core.$strict>;
+    record: z.ZodOptional<z.ZodObject<{
+        contentType: z.ZodString;
+        contentBase64: z.ZodString;
+    }, z.core.$strict>>;
+    readiness: z.ZodOptional<z.ZodArray<z.ZodString>>;
     secrets: z.ZodRecord<z.ZodString, z.ZodString>;
     promote: z.ZodOptional<z.ZodBoolean>;
-    readiness: z.ZodOptional<z.ZodObject<{
-        paths: z.ZodArray<z.ZodString>;
-    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type DeploymentRequest = z.output<typeof deploymentRequest>;

package/dist/schema/modules/deployment/types/deployment-request.js

@@ -1,19 +1,39 @@
+import { WORKER_DEPLOYMENT_LIMITS as LIMITS } from '@astrale-os/sdk/deployment/worker';
 import { fullMatch } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { deploymentCommit } from './deployment-record.js';
-import { frozenConfiguration } from './frozen-configuration.js';
-import { artifactModule } from './service-deployment-artifact-module.js';
-import { assetBundle } from './service-deployment-assets.js';
-const digest = z.string().check(fullMatch('sha256:[0-9a-f]{64}'));
+import { workerConfiguration } from './worker-configuration.js';
+import { workerRecord } from './worker-record.js';
 /**
- * `DeploymentRequestV1`: one release to host as a deployment of the Service of its origin and
- * environment. Services recomputes the build digest from the uploaded bytes and the label from the
- * Service name, the build and the configuration; the request states both so a deployer that
- * computed another address is refused rather than served elsewhere. The secrets are the
- * environment's current values, bound to the new deployment only.
+ * One file on the wire (`WorkerContentV1`): its bytes as canonical Base64, gzip-compressed or not,
+ * in one string or in chunks of one portable Value string each, and their decoded size.
+ */
+function workerContent(base64Size, decodedSize) {
+    const envelope = {
+        encoding: z.enum(['identity', 'gzip']),
+        decodedSize: z.number().int().min(0).max(decodedSize),
+    };
+    return z.union([
+        z.strictObject({ ...envelope, contentBase64: z.string().max(base64Size) }),
+        z.strictObject({
+            ...envelope,
+            contentBase64Chunks: z
+                .array(z.string().min(1).max(LIMITS.base64ChunkSize))
+                .min(1)
+                .max(Math.ceil(base64Size / LIMITS.base64ChunkSize)),
+        }),
+    ]);
+}
+/**
+ * `WorkerDeploymentRequestV1` (`@astrale-os/sdk/deployment/worker`): one Cloudflare Worker release
+ * to host as a deployment of the Service of its project and environment, whatever it serves. This
+ * shape only bounds what the request carries: Services decodes it with the SDK's
+ * `decodeWorkerDeploymentRequest`, which recomputes the build digest from the uploaded bytes and
+ * the label from the Service name, the build and the configuration, and refuses a request that
+ * states another. The secrets are bound to a new deployment only, or rewritten in place on the one
+ * the label already names; Services never keeps a value.
  */
 export const deploymentRequest = z.strictObject({
-    format: z.literal('astrale.services.deployment-request'),
+    format: z.literal('astrale.worker.deployment-request'),
     version: z.literal(1),
     /**
      * The Identity that owns the Service when this deploy creates it: the caller, or an Identity the
@@ -21,28 +41,38 @@ export const deploymentRequest = z.strictObject({
      * Service, which keeps its owner.
      */
     owner: z.string().min(1).max(256).optional(),
-    origin: z.string().min(1).max(253),
+    /** Any project name; a Domain deployer names its Domain's origin. */
+    project: z.string().min(1).max(253),
     environment: z.string().min(1).max(63),
-    /** Services are named by their fingerprint alone. */
-    addressing: z.literal('opaque'),
     label: z.string().min(1).max(63),
-    buildDigest: digest,
-    configuration: frozenConfiguration,
-    record: z.strictObject({
-        releaseDigest: digest,
-        schemaRevision: digest,
-        schemaBundle: digest,
-        commit: deploymentCommit.nullable(),
-    }),
-    bundle: z.strictObject({
-        entrypoint: z.string().min(1).max(256),
-        modules: z.array(artifactModule).min(1).max(40),
-        assets: assetBundle.optional(),
+    buildDigest: z.string().check(fullMatch('sha256:[0-9a-f]{64}')),
+    configuration: workerConfiguration,
+    worker: z.strictObject({
+        /** The build manifest members its deployer declares (`format`, `version`, provenance). */
+        manifest: z.record(z.string().min(1).max(64), z.unknown()),
+        mainModule: z.string().min(1).max(256),
+        modules: z
+            .array(z.strictObject({
+            name: z.string().min(1).max(256),
+            kind: z.enum(['esm', 'wasm', 'text', 'data']),
+            content: workerContent(LIMITS.moduleBase64Size, LIMITS.moduleSize),
+        }))
+            .min(1)
+            .max(LIMITS.modules),
+        assets: z
+            .array(z.strictObject({
+            path: z.string().min(1).max(2_048),
+            contentType: z.string().min(1).max(256).optional(),
+            content: workerContent(LIMITS.assetBase64Size, LIMITS.assetSize),
+        }))
+            .max(LIMITS.assets)
+            .optional(),
     }),
-    secrets: z.record(z.string().min(1).max(128), z.string().max(64 * 1024)),
+    /** Exactly when the configuration asks for one: the record the deployment serves. */
+    record: workerRecord.optional(),
+    /** Local paths that must answer 200 from the uploaded version before it is activated. */
+    readiness: z.array(z.string().min(1).max(1_024)).max(LIMITS.readinessPaths).optional(),
+    secrets: z.record(z.string().min(1).max(128), z.string().max(LIMITS.valueLength)),
     /** Make the deployment the one the Service serves once it is active; `true` when absent. */
     promote: z.boolean().optional(),
-    readiness: z
-        .strictObject({ paths: z.array(z.string().min(1).max(1_024)).min(1).max(8) })
-        .optional(),
 });

package/dist/schema/modules/deployment/types/deployment-response.d.ts

@@ -1,5 +1,8 @@
 import { z } from 'zod';
-/** Why Services refused to host one release; nothing was changed for a refused request. */
+/**
+ * Why Services refused to host one Worker release (`WORKER_DEPLOYMENT_REJECTIONS`). A refusal
+ * changed nothing, except that a `service-unavailable` may follow effects that a rerun converges.
+ */
 export declare const deploymentRejectionReason: z.ZodEnum<{
     "address-mismatch": "address-mismatch";
     "build-mismatch": "build-mismatch";
@@ -26,7 +29,7 @@ export declare const deploymentRejection: z.ZodObject<{
     retryAfter: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 /**
- * `DeploymentResponseV1`. A created deployment binds the request's secrets at its create-only
+ * `WorkerDeploymentResponseV1`. A created deployment binds the request's secrets at its create-only
  * upload (`bound`); a reused one compares them with its keyed digest (`unchanged`) or rewrites them
  * in place on that deployment only (`updated`). The summary says whether the Service now serves it.
  */
@@ -49,6 +52,8 @@ export declare const deploymentResponse: z.ZodUnion<readonly [z.ZodObject<{
         label: z.ZodString;
         serviceId: z.ZodString;
         service: z.ZodString;
+        project: z.ZodString;
+        environment: z.ZodString;
         owner: z.ZodString;
         state: z.ZodEnum<{
             active: "active";
@@ -60,26 +65,13 @@ export declare const deploymentResponse: z.ZodUnion<readonly [z.ZodObject<{
         current: z.ZodBoolean;
         createdAt: z.ZodString;
         retiredAt: z.ZodOptional<z.ZodString>;
-        signingKeyId: z.ZodString;
-        record: z.ZodObject<{
-            format: z.ZodLiteral<"astrale.deployment-record">;
-            version: z.ZodLiteral<1>;
-            origin: z.ZodString;
-            environment: z.ZodString;
-            releaseDigest: z.ZodString;
-            buildDigest: z.ZodString;
-            schemaRevision: z.ZodString;
-            configuration: z.ZodString;
-            providerScript: z.ZodString;
-            commit: z.ZodNullable<z.ZodObject<{
-                sha: z.ZodString;
-                dirty: z.ZodBoolean;
-                base: z.ZodOptional<z.ZodObject<{
-                    version: z.ZodString;
-                    distance: z.ZodNumber;
-                }, z.core.$strict>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>;
+        buildDigest: z.ZodString;
+        configuration: z.ZodString;
+        signingKeyId: z.ZodOptional<z.ZodString>;
+        record: z.ZodOptional<z.ZodObject<{
+            contentType: z.ZodString;
+            contentBase64: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"rejected">;

package/dist/schema/modules/deployment/types/deployment-response.js

@@ -2,7 +2,10 @@ import { z } from 'zod';
 import { deploymentSummary } from './deployment-summary.js';
 /** An ISO 8601 instant, as the graph's instant values read. */
 const instant = z.string().min(1).max(64);
-/** Why Services refused to host one release; nothing was changed for a refused request. */
+/**
+ * Why Services refused to host one Worker release (`WORKER_DEPLOYMENT_REJECTIONS`). A refusal
+ * changed nothing, except that a `service-unavailable` may follow effects that a rerun converges.
+ */
 export const deploymentRejectionReason = z.enum([
     'invalid-deployment',
     'address-mismatch',
@@ -21,7 +24,7 @@ export const deploymentRejection = z.strictObject({
     retryAfter: instant.optional(),
 });
 /**
- * `DeploymentResponseV1`. A created deployment binds the request's secrets at its create-only
+ * `WorkerDeploymentResponseV1`. A created deployment binds the request's secrets at its create-only
  * upload (`bound`); a reused one compares them with its keyed digest (`unchanged`) or rewrites them
  * in place on that deployment only (`updated`). The summary says whether the Service now serves it.
  */

package/dist/schema/modules/deployment/types/deployment-secret.d.ts

@@ -1,8 +1,8 @@
 import { z } from 'zod';
 /**
  * Why a deployment's secret was not rewritten. `secret-undeclared`: the name is not one the
- * deployment's frozen configuration binds, and adding or removing a name is a new release; nothing
- * was written. `service-unavailable`: the deployment is being created, another operation holds it
+ * deployment's configuration declares, and adding or removing a name is a new release; nothing was
+ * written. `service-unavailable`: the deployment is being created, another operation holds it
  * or took it over, or the provider failed, and `retryAfter` is when a retry may succeed and then
  * converges; or, without `retryAfter`, the deployment cannot be rotated in place at all (its
  * creation failed, it is retiring or retired, or the script under its label is not the recorded

package/dist/schema/modules/deployment/types/deployment-secret.js

@@ -3,8 +3,8 @@ import { z } from 'zod';
 const instant = z.string().min(1).max(64);
 /**
  * Why a deployment's secret was not rewritten. `secret-undeclared`: the name is not one the
- * deployment's frozen configuration binds, and adding or removing a name is a new release; nothing
- * was written. `service-unavailable`: the deployment is being created, another operation holds it
+ * deployment's configuration declares, and adding or removing a name is a new release; nothing was
+ * written. `service-unavailable`: the deployment is being created, another operation holds it
  * or took it over, or the provider failed, and `retryAfter` is when a retry may succeed and then
  * converges; or, without `retryAfter`, the deployment cannot be rotated in place at all (its
  * creation failed, it is retiring or retired, or the script under its label is not the recorded

package/dist/schema/modules/deployment/types/deployment-summary.d.ts

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 /**
- * `DeploymentSummaryV1`: what Services knows of one deployment beside the record its deployer
- * declared. It names a deployment by its label and URL, never by a provider version, and says
- * whether it is the one its Service currently serves.
+ * `WorkerDeploymentSummaryV1` (`@astrale-os/sdk/deployment/worker`): what Services knows of one
+ * deployment. It names a deployment by its label and URL, never by a provider version, says whether
+ * it is the one its Service currently serves, and carries the record it publishes, if any, as
+ * published.
  */
 export declare const deploymentSummary: z.ZodObject<{
     id: z.ZodString;
@@ -10,6 +11,8 @@ export declare const deploymentSummary: z.ZodObject<{
     label: z.ZodString;
     serviceId: z.ZodString;
     service: z.ZodString;
+    project: z.ZodString;
+    environment: z.ZodString;
     owner: z.ZodString;
     state: z.ZodEnum<{
         active: "active";
@@ -21,114 +24,12 @@ export declare const deploymentSummary: z.ZodObject<{
     current: z.ZodBoolean;
     createdAt: z.ZodString;
     retiredAt: z.ZodOptional<z.ZodString>;
-    signingKeyId: z.ZodString;
-    record: z.ZodObject<{
-        format: z.ZodLiteral<"astrale.deployment-record">;
-        version: z.ZodLiteral<1>;
-        origin: z.ZodString;
-        environment: z.ZodString;
-        releaseDigest: z.ZodString;
-        buildDigest: z.ZodString;
-        schemaRevision: z.ZodString;
-        configuration: z.ZodString;
-        providerScript: z.ZodString;
-        commit: z.ZodNullable<z.ZodObject<{
-            sha: z.ZodString;
-            dirty: z.ZodBoolean;
-            base: z.ZodOptional<z.ZodObject<{
-                version: z.ZodString;
-                distance: z.ZodNumber;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>;
+    buildDigest: z.ZodString;
+    configuration: z.ZodString;
+    signingKeyId: z.ZodOptional<z.ZodString>;
+    record: z.ZodOptional<z.ZodObject<{
+        contentType: z.ZodString;
+        contentBase64: z.ZodString;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
-/**
- * A deployment Services lists although this Services SDK no longer admits the record or the
- * configuration it stores, for instance after a stricter decoder: the facts Services owns, and the
- * record exactly as stored, any JSON value. Its consumer admits that record itself; Services never
- * acts on such a deployment.
- */
-export declare const unadmittedDeploymentSummary: z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    label: z.ZodString;
-    serviceId: z.ZodString;
-    service: z.ZodString;
-    owner: z.ZodString;
-    state: z.ZodEnum<{
-        active: "active";
-        deploying: "deploying";
-        failed: "failed";
-        retired: "retired";
-        retiring: "retiring";
-    }>;
-    current: z.ZodBoolean;
-    createdAt: z.ZodString;
-    retiredAt: z.ZodOptional<z.ZodString>;
-    signingKeyId: z.ZodString;
-    record: z.ZodUnknown;
-}, z.core.$strict>;
-/**
- * One listed deployment: a `DeploymentSummaryV1` whose record Services admits, or an unadmitted one
- * whose record is typed as JSON.
- */
-export declare const listedDeploymentSummary: z.ZodUnion<readonly [z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    label: z.ZodString;
-    serviceId: z.ZodString;
-    service: z.ZodString;
-    owner: z.ZodString;
-    state: z.ZodEnum<{
-        active: "active";
-        deploying: "deploying";
-        failed: "failed";
-        retired: "retired";
-        retiring: "retiring";
-    }>;
-    current: z.ZodBoolean;
-    createdAt: z.ZodString;
-    retiredAt: z.ZodOptional<z.ZodString>;
-    signingKeyId: z.ZodString;
-    record: z.ZodObject<{
-        format: z.ZodLiteral<"astrale.deployment-record">;
-        version: z.ZodLiteral<1>;
-        origin: z.ZodString;
-        environment: z.ZodString;
-        releaseDigest: z.ZodString;
-        buildDigest: z.ZodString;
-        schemaRevision: z.ZodString;
-        configuration: z.ZodString;
-        providerScript: z.ZodString;
-        commit: z.ZodNullable<z.ZodObject<{
-            sha: z.ZodString;
-            dirty: z.ZodBoolean;
-            base: z.ZodOptional<z.ZodObject<{
-                version: z.ZodString;
-                distance: z.ZodNumber;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>;
-}, z.core.$strict>, z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    label: z.ZodString;
-    serviceId: z.ZodString;
-    service: z.ZodString;
-    owner: z.ZodString;
-    state: z.ZodEnum<{
-        active: "active";
-        deploying: "deploying";
-        failed: "failed";
-        retired: "retired";
-        retiring: "retiring";
-    }>;
-    current: z.ZodBoolean;
-    createdAt: z.ZodString;
-    retiredAt: z.ZodOptional<z.ZodString>;
-    signingKeyId: z.ZodString;
-    record: z.ZodUnknown;
-}, z.core.$strict>]>;
 export type DeploymentSummary = z.output<typeof deploymentSummary>;
-export type UnadmittedDeploymentSummary = z.output<typeof unadmittedDeploymentSummary>;
-export type ListedDeploymentSummary = z.output<typeof listedDeploymentSummary>;

package/dist/schema/modules/deployment/types/deployment-summary.js

@@ -1,11 +1,14 @@
+import { fullMatch } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { deploymentRecord } from './deployment-record.js';
+import { workerRecord } from './worker-record.js';
 /** An ISO 8601 instant, as the graph's instant values read. */
 const instant = z.string().min(1).max(64);
+const digest = z.string().check(fullMatch('sha256:[0-9a-f]{64}'));
 /**
- * `DeploymentSummaryV1`: what Services knows of one deployment beside the record its deployer
- * declared. It names a deployment by its label and URL, never by a provider version, and says
- * whether it is the one its Service currently serves.
+ * `WorkerDeploymentSummaryV1` (`@astrale-os/sdk/deployment/worker`): what Services knows of one
+ * deployment. It names a deployment by its label and URL, never by a provider version, says whether
+ * it is the one its Service currently serves, and carries the record it publishes, if any, as
+ * published.
  */
 export const deploymentSummary = z.strictObject({
     id: z.string().min(1),
@@ -15,6 +18,8 @@ export const deploymentSummary = z.strictObject({
     serviceId: z.string().min(1),
     /** The name of that Service, the prefix of the label. */
     service: z.string().min(16).max(40),
+    project: z.string().min(1).max(253),
+    environment: z.string().min(1).max(63),
     /** The Identity path of the Service's owner. */
     owner: z.string().min(1),
     state: z.enum(['deploying', 'active', 'retiring', 'retired', 'failed']),
@@ -22,18 +27,11 @@ export const deploymentSummary = z.strictObject({
     current: z.boolean(),
     createdAt: instant,
     retiredAt: instant.optional(),
-    signingKeyId: z.string().min(1).max(128),
-    record: deploymentRecord,
+    buildDigest: digest,
+    /** The digest of its `WorkerConfigurationV1`. */
+    configuration: digest,
+    /** The thumbprint of its key, when its configuration asked for a signing identity. */
+    signingKeyId: z.string().min(1).max(128).optional(),
+    /** The record it publishes, when its configuration asked for one. */
+    record: workerRecord.optional(),
 });
-/**
- * A deployment Services lists although this Services SDK no longer admits the record or the
- * configuration it stores, for instance after a stricter decoder: the facts Services owns, and the
- * record exactly as stored, any JSON value. Its consumer admits that record itself; Services never
- * acts on such a deployment.
- */
-export const unadmittedDeploymentSummary = deploymentSummary.extend({ record: z.unknown() });
-/**
- * One listed deployment: a `DeploymentSummaryV1` whose record Services admits, or an unadmitted one
- * whose record is typed as JSON.
- */
-export const listedDeploymentSummary = z.union([deploymentSummary, unadmittedDeploymentSummary]);

package/dist/schema/modules/deployment/types/index.d.ts

@@ -1,7 +1,5 @@
 export { deploymentHosting, listDeploymentsInput, listDeploymentsOutput, } from './deployment-hosting.js';
 export type { DeploymentHosting } from './deployment-hosting.js';
-export { deploymentCommit, deploymentRecord } from './deployment-record.js';
-export type { DeploymentRecord } from './deployment-record.js';
 export { deploymentRequest } from './deployment-request.js';
 export type { DeploymentRequest } from './deployment-request.js';
 export { deploymentRejection, deploymentRejectionReason, deploymentResponse, } from './deployment-response.js';
@@ -12,13 +10,9 @@ export { deploymentSecretRejection } from './deployment-secret.js';
 export type { DeploymentSecretRejection } from './deployment-secret.js';
 export { deploymentSecretDigest, deploymentSecretDigests } from './deployment-secret-digest.js';
 export type { DeploymentSecretDigest } from './deployment-secret-digest.js';
-export { deploymentSummary, listedDeploymentSummary, unadmittedDeploymentSummary, } from './deployment-summary.js';
-export type { DeploymentSummary, ListedDeploymentSummary, UnadmittedDeploymentSummary, } from './deployment-summary.js';
-export { frozenConfiguration } from './frozen-configuration.js';
-export type { FrozenConfiguration } from './frozen-configuration.js';
-export { artifactModule } from './service-deployment-artifact-module.js';
-export type { ArtifactModule } from './service-deployment-artifact-module.js';
-export { assetBundle, assetFile } from './service-deployment-assets.js';
-export type { AssetBundle } from './service-deployment-assets.js';
-export { MAX_ASSET_BASE64_SIZE, MAX_ASSET_DECODED_SIZE, MAX_DEPLOYMENT_DECODED_SIZE, MAX_MODULE_BASE64_SIZE, MAX_MODULE_DECODED_SIZE, PORTABLE_BASE64_CHUNK_SIZE, } from './service-deployment-content.js';
-export type { ServiceDeploymentContent } from './service-deployment-content.js';
+export { deploymentSummary } from './deployment-summary.js';
+export type { DeploymentSummary } from './deployment-summary.js';
+export { workerConfiguration } from './worker-configuration.js';
+export type { WorkerConfiguration } from './worker-configuration.js';
+export { workerRecord } from './worker-record.js';
+export type { WorkerRecordWire } from './worker-record.js';

package/dist/schema/modules/deployment/types/index.js

@@ -1,12 +1,9 @@
 export { deploymentHosting, listDeploymentsInput, listDeploymentsOutput, } from './deployment-hosting.js';
-export { deploymentCommit, deploymentRecord } from './deployment-record.js';
 export { deploymentRequest } from './deployment-request.js';
 export { deploymentRejection, deploymentRejectionReason, deploymentResponse, } from './deployment-response.js';
 export { retireDeploymentInput, retireDeploymentOutput } from './deployment-retire.js';
 export { deploymentSecretRejection } from './deployment-secret.js';
 export { deploymentSecretDigest, deploymentSecretDigests } from './deployment-secret-digest.js';
-export { deploymentSummary, listedDeploymentSummary, unadmittedDeploymentSummary, } from './deployment-summary.js';
-export { frozenConfiguration } from './frozen-configuration.js';
-export { artifactModule } from './service-deployment-artifact-module.js';
-export { assetBundle, assetFile } from './service-deployment-assets.js';
-export { MAX_ASSET_BASE64_SIZE, MAX_ASSET_DECODED_SIZE, MAX_DEPLOYMENT_DECODED_SIZE, MAX_MODULE_BASE64_SIZE, MAX_MODULE_DECODED_SIZE, PORTABLE_BASE64_CHUNK_SIZE, } from './service-deployment-content.js';
+export { deploymentSummary } from './deployment-summary.js';
+export { workerConfiguration } from './worker-configuration.js';
+export { workerRecord } from './worker-record.js';